{"type": "bundle", "id": "bundle--57d844be-6367-48ce-83f8-ae1143ff54cd", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--e2267548-ba2c-4808-af48-b1c43f80dfe6", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--66028a4b-389d-4706-a300-39868a75ca7c", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--be2abe94-a3f4-4d8a-ab2d-334c61f9eb44", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--af110a8c-4cc1-4959-b9cd-790d5ade2eee", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33dc76bf-7cc5-4613-9f16-82d849eba1eb", "relationship_type": "located-at", "source_ref": "infrastructure--af110a8c-4cc1-4959-b9cd-790d5ade2eee", "target_ref": "location--e2267548-ba2c-4808-af48-b1c43f80dfe6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--751c47c5-74f7-44ca-b896-756096fb621b", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b9652de-f0a3-471e-a0e7-6ef10744abd3", "relationship_type": "located-at", "source_ref": "infrastructure--751c47c5-74f7-44ca-b896-756096fb621b", "target_ref": "location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0099a06f-b165-44c4-a55c-8782a98dfaa4", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d71c52f-893b-48c3-9799-fe2637bea174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.106.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b545fd-5f70-45e3-beba-a23a31134089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9ecd35-105a-4ecc-8b75-9c6b53e1d647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb35e0f1-5eb4-480f-8b04-604178ddbda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ba5e60-b807-492b-9f6d-761b4e0b12c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1ddf1d-5462-4447-a532-b46cc2be23dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c29c831-93ae-453e-a25b-c62edc5cb758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed811657-ab82-4e2b-95cc-013268143393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e4138d-8031-45ef-a99d-6367afc0ebf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb33fe-47b1-41e6-ad74-72d7a05211cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc5082e-41d1-4a09-9604-6d5291517d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e334cfe2-6973-452f-8183-99b840ec5918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7067d6f2-4039-48c7-b9c5-c9d94b1f49f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe89ec84-9aa5-45cd-9ed3-c7ac402c33af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0b89c6-257b-437c-95be-1a3d6597f793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5011e53-88c2-4fef-a3b4-b700cf494535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9334256c-bf0c-4f09-bc67-b14b422e0974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fabbd8-ea46-402c-94a3-9dfd60b4a708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443cb742-11f5-4a39-917e-0181320775c2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.95.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6c259e-040c-48ce-8891-7a0d89e40d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec1e2e5-e9ac-477d-8776-82d468b9cf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9b3014-be10-48f9-b82d-d0f993ade61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238387b1-a9c0-4e16-b1a8-0020f02df017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f677624-535d-47ba-bb4a-bc21062f4e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c89f56-15c9-4ee1-9737-ab317f04aac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155f11c1-d237-4165-a338-610b7c71f697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbc6792-c750-4967-b532-55dced3e0c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd029780-1474-498e-ba90-56721e07f24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bb0c58-1fef-4b65-8e71-eccd843c90be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2da0b1c-2796-42c2-996f-3096f695ee69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e08422-1902-4c53-81dd-eb6a359b8c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660c1a2e-0be4-4e59-8da5-8ea0fa7252d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2f8855-e49b-4e16-80d9-8933400d4dac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3edfab7-65ed-44d4-93c9-b59c260cb329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.210.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ec76f3-d66e-4d87-b7ec-2622a573297d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.225.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6b15c5-54d9-4baa-a5dd-c0241064d1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.130.71.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4337cda-eb3c-4606-a3b5-238f905d3e60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa9ee1b-711b-4adb-ba87-f5a387757f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b0fefe-c8b6-4172-bd42-95b7e977fb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0b234a-83c2-4b36-9b02-3b71f5373c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7653173-49e0-413a-8fe4-0f4c95dc2d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae472e9-fcce-41f1-95eb-989e20221aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d7021a-c6c0-4d2e-91a3-6137ee1558a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90e87b1-0756-443c-896e-ea1bf5f08eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a1ff77-1f9d-4390-9d60-9ee72d24b874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcc102a-2999-40b4-a76f-2b2969e74d7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.224.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df03da7d-d372-4636-a74c-75079529aa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.108.151.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5210d4d6-b142-46f8-b810-8bd755c38b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.48.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88843c57-d405-4987-8120-415f3aa3e329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1addac0f-0f5f-41b3-a98a-be83c4cc5d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc21624-1d00-4078-b9ce-3dc6768965ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.145.190.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db5f051-feac-4b53-9e0d-7a4a45bf247a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f164176e-a4d8-43d4-a737-434c5c942c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69db7e86-482b-4ef5-876d-ab895054acbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.18.14.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99db38b-8868-4eff-b9fb-d706c5bddaf3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.188.177.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7be97d3-bcf2-4b8a-8ffc-372c093742f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.208.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43e6e97-cb8b-4fd5-8552-90848116028d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb88405e-b71b-4cf0-a311-5da867fd7a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.92.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceb9927-ed26-4eca-ba31-dcb099e80447", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.243.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610df9a0-50cd-45b6-ad68-34f7f17e50b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.239.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a118db9-50d1-43ea-9e61-0ff24c6e169b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.231.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f83ec41-a835-40d4-83ff-93973f3394a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890df7fb-b1d2-4028-9f9a-eae43c89efa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.88.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e096bde7-a598-439c-9a8d-a5c8e85fe6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.206.20.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93c87c0-7b5a-4772-a042-f66599186419", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.216.145.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59181228-0d75-455e-aa5e-3fd1596c9792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78342c3f-b4d6-445f-90fe-4c23ba77ee0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.228.36.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04441717-540d-4c8c-b64e-503db96077a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae3242a-13f4-4d16-a449-34fb5c4d9720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d8c238-a3e8-4303-9035-714389e0fd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a60f97f-90fd-448e-9782-a13e15d9e1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd228c24-03ba-4075-ac37-14f7f551013e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8af842-491f-4e87-95ec-40865d88750c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021d168c-1fba-4713-b128-9a1d05e9951b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.243.24.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34153fb5-17ab-4677-b6ea-2189a993feb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.245.10.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a800f43-1378-4cc6-afb6-94165c5daf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f33efa5-3f3a-4e16-ae4a-410f69dd4900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.3.164.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bd51fc-1ea4-4a56-987d-226221d76b03", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.44.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df72fc7d-e43c-478a-aae0-afbecbbfd020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.20.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf9be20-f650-43d9-8368-ab43c93b9922", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.84.236.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c9812c-3e4c-4b54-a282-4736764d4dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.101.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed6d894-45b0-4708-8ddf-110ca53240bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.97.142.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c443e2-8da0-44c8-b5d4-fee353401b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.2.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf454dd-f757-4248-994f-9c5535c4bea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.129.28.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aea5a2-8d29-4032-9ed6-d83079458254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92eb9f8-6ed5-4f11-9494-dc70cdf20c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.68.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffd4ea3-42b9-436f-9f52-356ff3954b6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5540eb-d653-4846-be27-2be5edff12b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d10e9ee-9544-43c7-891e-cd3bc4951172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7385c234-737b-45b7-862d-4cc3245610d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b6381f-b510-458c-8a4b-d3d97226e837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16e90f7-a178-48fc-9599-b0d0d10a1ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12f3c34-8e26-4ba7-9f4d-25ea16fdedfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f07cba2-6893-44e7-89cf-f77fe4b58c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.170.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca7a60f-4034-468b-a29f-ad920f2bcfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bb0345-eb92-48c1-b232-4d9771a34374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a0f394-f3f5-4605-847e-8ba345d0b8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.181.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570aa7c9-8d6f-4aa8-866d-dab9e2270c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.105.88.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3456cfd4-e100-4817-9d74-537acd3d6613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.116.165.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbdca8b-d921-403a-ab02-17c4c188eb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.240.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92772ee3-7849-4962-b52c-dbd7864205c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8217dffd-802f-4b5d-86a6-d345d379c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343713e4-8aec-4266-9549-545ed28dcd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb81224-3663-4f77-9375-09cf01aa6b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf765d9-5a9a-4edc-84ea-b36a997ef4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e334da4-6178-469a-843c-616ce22fe1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eebd49d-8c99-4d42-99be-971591e9682c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc33239-1f94-4b2f-b57f-a5f45920eb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8eb802-c27c-464b-8cbd-d135b1365673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d765ebb-1782-4a3f-82d1-0bd33a0a11fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09356b4-ce6a-4675-9a1a-d67bb1c1801f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c742a5e3-fe9d-4547-bb15-0550d0d68067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797d230c-1cc4-4455-8507-13b0e8fdd87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f057e22-4ebf-487c-a5f7-f248de7f4bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c059354c-3a26-441e-a60e-8b01af6e4207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8738eb8-18f0-4883-8d7d-8b7684e0cb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ffdf8b-5da8-4611-921c-a4e568cf77a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c248a901-3d74-4885-a846-57f02b6a557f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662aedcc-6706-4eed-947d-3a900e13f53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162b4805-7f81-43ba-9776-93921d584612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01aaaa9e-9556-4370-b3ff-491db9efe5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322607cb-1be4-4ee5-9ef4-c346d56e01ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a25cc58-b1a0-49fa-86dd-7f3dacc20329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.20.23.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ed76ae-4790-48d8-94e3-1c45ca9c730c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1055ce7c-493f-4758-a913-00872840310e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0578cffb-bf94-4332-9372-dca4cd770bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce58ef51-fbcd-4c3d-aac9-3ac46304e9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95934184-15a4-4233-9780-c2ac83d5665c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b465411-dc0e-4910-a8ae-1597503feba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d7a2a7-68a1-4ec0-901c-06a84108e0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34350858-c892-4141-a044-2396e5db0588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5065154-eac0-436b-bfab-5fd0239ed92e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.241.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb0e9d7-42d7-4792-8de9-10883c9ad50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82014695-5a1d-45c5-aa62-9260aa387af1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.210.130.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f350937d-be2c-4cda-96bc-bad33d6937a2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f385e48-ab48-4b10-8306-20912dec034d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.188.66.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf583a9b-42b5-4fee-b091-ff34c79b2d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.226.237.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194ddb24-dd21-4240-9f8f-8301ca54af7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053414a2-253d-4df8-b1ed-baa35ef0d6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.196.133.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bf8437-b796-47da-ab81-c795ade6e606", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.214.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0733a3db-0481-41d0-ae8d-7b6b580627bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.36.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab341ad-8749-4d50-8038-36f323e76b83", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.47.243.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476344f4-20cc-4269-bd0e-80591cf4ff9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.10.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008d0fe8-2970-4383-979f-6bd26f835d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.199.79.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ecc36c-d6dc-49d5-8f53-00644f637daa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.219.151.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c3b22f-2f31-4b79-9994-2c009c8fd55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38039c5-42f4-428a-92f4-5afa345ef08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.201.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26af9b13-e246-4cc3-bbd4-06a1719e526c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.162.54.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f794e46-fe65-4ffd-b35b-025df418740f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.171.82.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb730ad-bd0b-4a66-bc4b-79d7f428c7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.20.0.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c1581b-9e4d-4fcf-986b-d255e1646cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.215.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b6a60b-e51b-40f2-bdb3-f3930be95b61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c230c616-9b16-47b8-a80c-285ca8c9adbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c586d90-a28b-4a89-a6bf-8e7eba939632", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e392d2c-7e3d-4ebb-a800-b4894afab4b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fea2f15-350a-4d48-ac1e-21a71626235a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408bb07b-6702-4b02-bb93-b43de24988fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7ba793-2def-4582-a2b2-c0cb546b5cac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b5b1cc-8249-4498-8af5-bcff36e35fac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec28ca7-2f6b-442c-8bfb-8281a19cba79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71a52ea-8fe6-45a0-8016-06197e59c933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a9cd13-b57a-4716-a0ed-1377acbaa530", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8c69cf-3d60-4aa8-ad7e-f4f562b2d3a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03628a3f-d4ff-4697-9fdd-c477e5d1fbe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a0243f-d72c-4ab0-aa75-9f1357fbdf94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fc388f-b0cb-43b2-91ea-20d90b07bc35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03ce883-ce1b-4722-983a-2d6ffe954628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9781cc-850e-4614-9b26-b79bc18a06f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e35373e-b5d8-4053-8a6a-46186c9fcffc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6739b0e-bf9e-4a91-89f9-2f27db879aa3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b997857e-ba6d-4749-aec4-2effac89711d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c20ac6-0b90-4c79-b633-3db7294cdf57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc170207-593a-48c7-8ac8-aaa48a2bfc20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e130d10f-f8c3-4cf8-b951-eb97aff847d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a142f883-d55e-4afe-adfd-bbd63b3e594c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761c8f99-f5c2-4b64-8c9f-1c2e142c0118", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0501de-fdf2-4c2b-92e9-dd10bf6544b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed10b38-53b9-4f6e-9b40-ecfc4e24c702", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98b02bb-0316-4bac-aaf8-2964a566a1d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66573e67-57c2-4642-b0b2-19cc6c9563df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cccc966-44d3-4459-be96-6d26fb40fd0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed14ccf3-b7e4-43e1-851a-97504d34d62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.141.59.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25db202-082e-4b5f-93f8-e6af189ad0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.232.58.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d30a4a-2a7a-4fd4-830c-7bae4dc23b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.245.157.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15378a7-4fb0-44c3-8854-dd867ab37cad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e09ac70-1c32-4ed7-8816-b606fedc1fb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.59.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30665d4-7171-42ed-9614-a2344838165b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.160.92.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4082206d-7675-407d-9ac2-3fd537a2ed4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.165.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bf17a7-9d09-447d-a23a-a6469efdcba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625ae6ba-52b7-4ba9-b89a-55a137bc3c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.49.7.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53040ecb-cb35-4bc1-995d-b0b9fa0b2a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.123.150.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a5ec99-6b54-4e46-b5e7-877b55a21ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.176.37.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7456d6b-a6e2-47d1-9f56-aa5e1eb85723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eea099b-72bf-45ef-a809-548962ff8f4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94d23fe-c15d-4d6c-b7eb-ea761544eb97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6a2c07-3224-4db6-a1a2-38970b7d57b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d89686d-b070-4160-be26-a4c8a57eb8ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823b4e38-9644-4177-a83c-f182b1ecc1b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5b815f-1a90-418f-bf66-1da1bdc4680c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c7e9e3-a7eb-4921-bba6-f50de5293132", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb8e142-2526-47d6-9e47-c05ddfb166a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5a9580-2c73-46aa-845c-4b7d58cd5bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b08a65-61fb-4b03-a98e-00d61dc17d7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2234a7d4-ee2f-4730-a1dc-53f5cfafa766", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a07fde-e5f7-4428-b74e-b83532e6da14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577d80c5-9613-46fb-b703-554ba61edd5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c23cffd-46d3-4ef9-aad0-97b23c4f3e10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9bb9c7-c1de-4008-9d5b-2216bba70991", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df96cde7-aa45-48fc-9069-708515600830", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89500de7-067c-4a18-87c3-deb84f37d05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.56.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2b6626-68a7-4451-b7ae-a7902c4e9fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.11.89.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c070ffb5-aeae-43c1-b381-387a8af056f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.159.26.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f58eed-8ea6-410d-87b1-1022bd411b46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.33.242.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91518bff-584f-4288-8124-bc3a36bf3029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f75a06-ee37-42d8-a23b-ee497ccd7f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b79e8b6-ebfd-4cc7-96c8-6d64acca3aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c844e5-f7e7-47f5-99bc-6bce74be1fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.37.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1733eea3-a1dd-42c3-aea0-62e6e3873694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37765194-94d0-412e-b05a-ebad1d9fe919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b20662-ecf6-4654-a193-2c9e8f11ebce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f354354a-c372-4a6b-b072-08e0812699d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fc7fb0-b3ff-4a63-b96a-870fe5d08e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89c96e1-2231-4111-9e92-c78fa34da9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6432ed0e-8a54-462a-862e-3a42b1dc8b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5690ba-76b4-4d70-bb6e-489008e90047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf78d9b6-4d97-4056-9cb3-dc223a64c741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c45f959-9fe4-4c3b-b328-32428edda8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983f8a4d-c0c2-486a-9fa8-fb265d916e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230b07f2-03b2-428e-b853-13853447e677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3b15cd-002c-4076-969a-31c29cb51782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f1bf91-bf22-4a63-95c8-4596e46f6a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca569fe-4b18-4cc1-957e-34c0ae44ff05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f9afb6-7601-4236-8226-279a85c45274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0d3605-d06e-4dcb-9eb7-eff1a94f9065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8241319c-7618-417e-a824-1b2d9625df7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6068632e-299b-4299-8d45-f7ba052c1c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a6d383-bfbc-4de0-92db-749fb11b8a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10597ef-b0d6-4fdc-9db6-68cae540abec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd67acc9-d1b0-42c6-8b35-49584f44cbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3156e0e5-9caa-49bf-9bfd-c57fca63a02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e64b50-8093-444f-8cb0-75b704adf2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fb8f86-3828-4645-8b3c-2518cf23e309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58720ccd-8e90-45f3-acd6-f7d08fc412af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b127d40-98a3-4e06-8007-e6f6b5e2402b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8639865-ee8f-40d1-984d-bdae3d19b94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332a48ae-5b01-41e5-a928-73f234a91e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f283f60-a46c-444c-b0e9-fe521c794b25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.38.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4941e4-d0b3-4ef6-ab85-8beeec03cd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41aa40d-34bc-4b98-ad35-a519b91bdb12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.24.135.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d46db3-9c0e-4594-9f40-91be789ff895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424fe2d2-40de-482b-976c-ab135bcd79e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc7e6dc-97c4-4a17-b94b-fa0b8dbc0311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b72da2-5e36-46d8-8dab-6621a1a75697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16767bcf-ca9e-4fae-8dac-1a2419057d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af4882a-b04f-4820-b27c-dd967b48c69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba570d-b12a-4e1f-b82e-5fbdacb8f280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.39.50.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3440d0d1-f0f3-4b32-a0e9-5bfbd5e22e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fc8757-a5ad-44df-837a-af8c44073ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.80.62.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418f34f9-ca31-43e2-a7da-952a3deeabf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.130.0.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd357cb1-9210-4403-ae1e-6af704a7999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.152.232.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa329a4-cdb5-4f19-94b6-bcc97b3e65bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.246.15.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53afb861-7c38-49c6-87c2-8a6b482ac4e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd960dc-8734-4c82-88f5-d81bf84e0ee7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.11.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf0a874-2560-4aba-ad53-30b9250a0436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.22.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0719bb86-787b-4d7c-b99b-f7a06ac51320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.71.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370161fc-c2f0-4420-87ad-610751eea1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611eb19a-3b3e-4db8-9954-505350fd28c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e8a4e7-bef6-4fe0-96e8-d812a8dbc03a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544c0ca7-a108-40c9-9d39-9b5cb3a1e682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.9.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e30fb4f-6c5f-41a8-8487-ee544af9ec86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c98eb82-3583-4ace-b5de-22d8d189481a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.215.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaa6abd-c5b7-45ac-bbf3-640ce79f0752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.234.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f6790d-d674-47ad-b14e-382dd2b42740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3589097c-4ce2-47b4-9f29-16e87cab39dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce334597-762c-4dbf-b09a-832ebbfb55c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d27451-e9c3-4e89-abfd-ef4362ac1f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66db2986-be33-4be1-aa11-36742f3807f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fec963e-b08c-4d5a-9836-dac515615123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d631686d-2b62-43aa-bff1-f61d5976f381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a84ce2-05d5-44c1-a059-a7fc5c46e5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8177b12-6c63-4a4c-aa94-773842593fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240b890-2656-4ec8-9441-627e8a6f4cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82efe91e-b1cf-4cbc-9b1d-237bf461d9b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.226.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf3f373-0fdb-4b64-b521-9f1a627c1b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.160.173.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd30502-34b8-4793-a7d6-225a98347c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.107.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1160f7-dbde-47b5-8dd4-907dc196b1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5c268c-d446-45c0-b3e8-ca7cdcd378bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45368933-13a5-454d-9e8f-21f012c559b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba688d7e-7996-4da7-b5f5-7d21ca5dc985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.59.110.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3207e2ac-7aad-4cbe-8607-670964af37da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b6c26c-52a1-4fda-87da-4f24d5899030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89827738-8a17-4e32-bbdb-a91b82d2160f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c348b70-61ae-4ee9-9f79-2daef4c9ffe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f692cb-2a26-4511-bbfc-62e61e1835c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edab1768-065b-4ebe-a4b7-a84144a7454a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6db45bc-bad0-4f59-af1f-3fae85cb98b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45595fe9-5bbe-4cc1-bd54-c16d43f54400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64a28e5-308d-4092-9570-e33fa2c12c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dd8ded-0ecd-492e-bc23-c2348bc47a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745cc5c9-faa4-4911-b8a6-e59f99b32915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13a0438-9694-46bf-9eec-611b32be3ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4584955-5072-4e72-a7dc-4f0bbc72514a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270b96f8-cdd6-4059-87ed-b2e1231d0746", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.64.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fed692-3107-4353-be22-7f2a27834668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8b1a14-d2d2-4aa6-bee1-7144ac820e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d805054a-e399-4d55-926a-496ffa6f889a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49300645-c87e-464a-abf2-a8037ac1d85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf977b4-5b5d-4658-b2da-d4a23ff8c67a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.78.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e592b03-e7f8-49b2-b213-a3a4668e0abb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200969ef-9212-498b-8c0c-ef5ef8860a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.227.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad990cc-db06-4846-9853-795f54b4bcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.158.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b9fea0-0d95-403a-99fb-855bbdb3baaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecbbaa9-82c6-4dfe-8467-0abaa1a426e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0913b6-78ce-4d05-9b00-4df7268e8eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4f2e8c-223c-4e71-b1f2-85a3521559a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fe59b1-dcf1-4f84-ae47-09272dbc78f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092b8d27-96d2-4c8f-8665-76c56222879d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bca2841-7163-4fe2-88cc-fa306a10f440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad261be-8e8c-4fdb-9091-d7715f77ec59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaf9d1c-4160-4df9-8d64-7fbd5d39a325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b972ac5-e325-4c74-ab91-ae6ca999b223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87dc11e-dd36-4118-9dac-2b010927765e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c1c939-8251-4cd6-9b4e-4ad9ce70fec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.122.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4eeec5-4398-4a2c-8195-eb928b8a3ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.100.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b4d4e3-1e48-4bce-b587-0868c0c9aae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.73.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86fbf94-a5d8-494f-b95d-66a11036d8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.241.3.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1fd15a-9ca6-467b-ab9f-67f372a9f0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.173.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f53bff-789a-427c-a3f4-f0db15a8c6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.12.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f64ed38-ba68-48c6-a202-5dfd186b947e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.76.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b49381-96de-4197-94c2-d7e43d8aed9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.156.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f34fbf-2ad9-4e75-a5b8-9b2ce3f90b37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.120.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc97964-f733-4511-b582-07e19749dc02", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.174.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b308eab-ec56-4542-9580-4792633d27e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.6.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b159038-e6fd-407f-937d-9ca1327cb642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.62.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b989b57a-eb36-4b03-8318-59a684b3d882", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.99.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1148036-9868-4edc-9ab3-c96267ae91fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c20f00-1ecd-4f0a-a8cd-99490cc00995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccb37f8-3f37-4bf1-acea-dda866e2f778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d4d80d-5e7a-4681-a359-6438712a4589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511d1f99-d2ba-4584-9da8-6914211d91cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffda9a0-68d6-453d-977d-52cd86fd2f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a072af46-199b-4773-a8a7-7a03204b2f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086fc164-7ee6-45b3-b6a1-d846e4fb63ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5662afad-b653-492a-9331-a46a7bf1298a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a44723-66e5-42a4-8619-c1a4fe8b3e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f05bbdb-15c5-44fc-abf4-5d919d705873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713bfd4c-71cd-4e2b-ad44-d06f140fb7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db0c311-69e8-4e1e-82d8-705438eab4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef7eced-f5a6-4804-92cf-40505000a177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4729b500-4dad-4568-99e8-0c604e53230e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1da2f23-6064-40f6-8602-356eccb2e1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c858c807-2263-43da-b9bb-1138785f8b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e880a-b8e0-4387-8923-ca20800b9baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9b3016-baf3-4673-8ea4-0df248c6c95c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.109.1.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c482f-f5ae-4e0a-b356-0bbe38ff0708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.114.246.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b68552-9190-4dda-8e70-dc1aaaff1f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.175.187.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df47449f-03bd-4703-bd8b-4be99ea7015c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.234.133.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56ed696-7c50-4f46-8305-6d4d4cceaa5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a2679e-d9b8-4b3d-bd0e-3a9a02f03ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.152.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fb75e4-1d2f-44c4-bf25-ebe00f2f3a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2e9fe3-57fb-4b31-b9f6-05e7b98170a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.87.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763bd346-0d95-47c8-94d2-24823ccd8198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.235.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0898f5-0114-4180-b1bc-be2ce26dba24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3143c3-a490-4065-8094-f6a00ecd31a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62189418-bb02-4408-9281-5892ff85bc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeee48a8-264c-4ed2-8c9a-c927b3f27aa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8d1860-1b6c-4d39-9a2d-10c4e9cb2151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.139.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683ab11d-1800-4ea2-9373-35ac991b65f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.186.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35682f2a-c060-4ac4-a909-4b7042c1877c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98c5e5b-bac8-42c8-b76d-96c9e5d6018f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f58658-216a-4b65-8ca6-f507172ee5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a2c7b1-05f4-4a29-a036-ca689371a180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be91f6e-80da-423f-b67c-5d16cb6f707b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5e6b85-3a61-4575-a3d7-1f9567f04cc9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.119.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d776b37-b631-427f-bae4-a34c6a342c42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe62a20-c49a-4de3-96b7-712296276aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.61.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd98e0f-011a-432b-a21a-29e0799a108a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.120.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674ab037-68ee-4ecd-ae42-2915af6e56eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90248267-72c9-403d-8847-c359461ff03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.246.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8235c8e-1cfa-49f6-bd8e-702330a7087c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cd1036-5b7e-4533-8739-28c65bccf19d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.6.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c087720e-25c6-41cb-a438-cb380c72ba1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.113.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e6dd89-9965-4dc2-ae4f-ac4f90b72904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3912164a-8b89-4e74-ad90-9283e9e50f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7249f1e-462b-455b-a967-29358f70a622", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e826fb-edd2-4902-9eca-644c1b7d152e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38bbcf0-2db3-477f-a2b1-7526fa8a9f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.170.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200ec156-c823-4629-b7ea-2564086d10c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.184.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a6cab7-3cb1-4d9d-aefb-7c80e0a73a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb856f8-93aa-42eb-bc6b-18512eb6679e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a840cb-8d36-4253-ac18-473dae1d53cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afd4872-0152-4644-86bf-f333ad5b902b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c68f6a7-5b33-48e2-a903-4973f08ed30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.82.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485daad9-595e-480a-8d7b-5578a36ce021", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.220.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5ba8b9-c810-45ab-9e76-0a2aed0a9bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27acd2ba-8388-4ae4-807c-a9c1683f27be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.121.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7426a62e-0eee-4466-9a44-ed1658a08121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.154.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196e7dc5-b611-49de-95c0-0352316310dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.214.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220c0cc2-06cd-4ce5-bfdf-86aafaa34334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.106.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d120054d-6dd4-401d-8ecb-0e55f9c719fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640fd101-fc7b-4d01-925b-19e0207b2a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.197.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12fedf2-f3c1-4c3c-b359-c106de75dbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.73.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1651c09-3c9a-41c9-ab92-1cdee065cee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.79.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cc3650-472d-4e71-b8c3-5c1284301c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.177.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ca403a-5abe-4c54-81df-d704701ba626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.48.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172e0d20-8987-413f-9b6a-7fc53c31fe7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.255.22.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864a77f9-382d-46cb-a0db-de8f21716f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1d153e-72d2-413e-8b97-2963e5c7d357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90ce9ab-efe3-46c9-b396-d892d52cb937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e50f07-ad8f-4fb1-bf7a-4896623a17c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ee5095-475d-44b5-80a4-569beb28611c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a839b9c-1ad2-48f3-baa2-924cc99df640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c615005-dd3b-4893-a712-3c7ca125d4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7cb667-6726-4b3c-9985-08953902b9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac51963-af7e-4199-a972-3bd50d3d1f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70695f1-c189-4d4c-905b-cb87d5cc7386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820a7a1c-aa20-4f02-a9eb-17b7eea42f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02647a63-b7cd-4486-8d40-e7acd2bbbec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc609e5-3806-471f-a79b-74a9ae8e8c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd116594-6ecf-4b10-9000-5db6fa099580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097ec1c4-ce53-480f-9e4a-a61d87268918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9471ceae-a1b1-4790-a784-240147e4c193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9545b7f-d910-4a7d-95ba-8afec24c230e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6990ba-5108-4c86-a8e1-122b3d993c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba34ea3e-c6f7-4d55-8ed4-db836b94d24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b744bad1-0df8-4d52-ac1d-60b305dd2ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e6a0a1-c60c-46e2-8b27-80e1619e37cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e224011-cc80-4255-917e-f772ccb6255f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.135.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c8d453-9c57-45bb-b1f3-4c877c374c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786488a6-e3e3-438a-b1a1-7f120061da86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.112.163.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4171aea-423a-48a0-b0c2-e22c02b3ddf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.132.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c07904-c64b-4884-973c-31c239f5b435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727e7677-8405-431b-9f74-e4033a20f8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.135.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4649c3-3c6d-443e-8228-d9cdd04196a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.242.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e473c5d-8366-45d7-b23f-ae8763097021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.54.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c5a853-fbba-4b3d-a4bb-5781734793bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.58.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9d42f8-bc1b-4071-a1fc-9e54407d3051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0f472d-71e5-4bd1-b89a-b6c527d93f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c2c8fc-c703-43b8-845d-6d91f2ce6efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb42d13e-a7a2-476b-99aa-37773395f1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71a1679-5c41-4e21-a285-c2a68158adf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea9885d-8ef9-4c5a-aa4c-40ae4946edb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec7b802-b240-4f89-8ef5-b0b839720e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4f3c39-ce06-429c-9c82-3d2a010ee7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56555a3-fe20-4cff-9ab2-dab62fbce667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801764dd-678a-4e62-82d9-ad180cab8ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc79f96-1433-4624-8067-fb04defe6f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3c8c70-0401-49d9-8f35-c8ed98f02bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bea373-9098-414a-9ebb-9f1b1e03a892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2d90cd-70be-45b6-9790-917dba10594f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046a40ea-47d5-410f-9a8f-6ea515451cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b43f4a-f1ef-4d09-b211-14c81fcc80d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321d3873-703d-4ef6-804a-d16c454fa186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891fc50c-1925-4ae6-936a-56e54c20ef3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227615ee-edae-4729-9233-705a3fccfe67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63e95a8-ebae-4787-b00d-a18866d972ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ccefb1-9315-4d28-8734-23f610c080cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ac42fd-6c92-4354-b96d-2a81256485ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557b8ded-feff-4407-97b3-5e45f771f11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a8e108-0940-4d9a-8434-10fc1a4e4158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db947d05-642e-4fbe-88d9-56893acb9b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe198c-71a4-42c7-bb1d-3b4c368dffde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe6b0c5-090f-4e1d-872b-5134e2bb2b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ff1655-ae8c-46f4-960e-6ff79cf14a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a18b5a-e0e3-4568-8c0d-4bf658a9d90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78f9bf2-47b6-40e7-b4df-244ca234d6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3e85f7-373e-43b2-9365-167f02bfe8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f84b4a7-a651-4fbf-9e97-a0ed3ad20626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2360b97-a6dc-47ea-8447-026310be5bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07957a2-c485-4c5d-b413-72ed88db10a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81673191-cbcf-45ef-85a0-b09c409f484c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4ac50d-ec7b-4a5a-9d06-b6aa623f002a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40aefcc8-66bd-4190-98b0-5555ec8ea34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37df0f1-c05a-426c-85a3-b7c54fe698e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507e5cc1-4755-4da4-9cfc-e15cb4a1a92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac940262-f53b-4c3c-a8da-d322031f678f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b63f59-4515-41f2-9dd7-d649eaca73e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acce88e-cd81-47e3-a10b-0e2f72e2fea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5188345d-cff4-4814-817b-671aa899e0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaacd2f-c5ad-4046-aa04-2f0522fd1d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb54fdd-0830-4533-8814-f5870d745e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdd894f-817f-42ac-a30e-b76dad385adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30be8fc-bb1f-4f52-bdf3-0f6abf7baaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8213e5b-7723-4dbb-bfd4-01fca7d993f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38f9b30-0f4a-4178-b6d0-077eb8627d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f4d424-3b0c-462c-80a0-e5ff7b4aeac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4152f7-bb08-444f-88a8-08a9cd5cf96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c72334-50bd-4570-912e-48d3cc35d75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd712e6-3779-4bb6-81a8-588e1a8d35b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ad6290-a5d4-4295-850e-a638941df4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b959c7-69ec-4fed-be5c-08e04d205123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51acd102-24f9-4f4c-a679-de5a3d827588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0d53da-2744-4404-bbc1-fc0957141c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53568603-ab88-4517-b4a8-8b821c6f26a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fab9da0-ca16-481c-a593-6a47a74abfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639332c3-ab47-45ff-b62e-23fe42881a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7529754-ac72-4b50-be37-375aea7acea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4124f382-310b-4a0e-80e1-264f505114f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f3612d-9d21-4d11-9000-5bf22c0f56e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421cc615-b4c4-4732-923d-2acfd01fd278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dea86de-f8a8-4120-81f1-f3a60d07008b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335b65d0-2bfc-49a4-9dd0-133ee67c72c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2339835a-2425-4ff1-97ea-481bd59104b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391e7786-35d2-41f1-a628-e3059d654968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae3253d-4032-4405-857b-728237a81165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd00419-d662-4043-9c87-d9a96c1142a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c94753-fca0-4699-9f81-64aa97e3a558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d300617-0502-4715-adbc-cfd910eb9186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558f1d11-5504-4eeb-b1ea-bd3ca92da8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b61aee-e0a6-4e8c-893d-977bb4f10675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bda115b-f097-4576-964d-5b00db62be57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4661aaa3-be4c-4432-8ba4-e211161982ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d1bcd1-8497-416c-8517-defbe9c332f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9db779-5f7b-4f78-bdc1-6c6f5b1d8610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8868ddb8-908e-4805-b933-4f42e8e36949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fddda5a-d052-4865-963d-86f18cd2bea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3032a63-9fc6-4ac4-a704-aa061f84a852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad34c67-fad1-45f6-9916-edea1770995b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d893e0-615e-466b-826d-53777bf02d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15792a2-5d54-477c-9426-c65aa548ce58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ad2851-127f-46bc-ba0f-6227651c110f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2004cff8-1bc3-4175-b16e-ae550c7cf61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa4d153-6963-4f65-b090-5c48fb6581dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d391fff-ca02-4b8d-8123-aec7ad290fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f956a4-27c9-4ecc-a1fc-4d72a725a8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bc6cc2-8206-4c8e-806c-bbaca9d3674d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d77d2c8-6cc1-46ff-81b0-0bcd3aec872c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a73bd47-cf1b-444d-9a13-524b572f1729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b5babe-ae92-44e4-8360-49cde22cb69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dba7e67-95b7-43f2-bf77-a43abd40c0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c935a048-8c55-4b57-9f5f-6dfba8385388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b48559-d1f8-48b6-9072-2969003d1a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3b79d2-2741-4a13-85c9-5380f31f5f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e820b7-9bc3-4161-81f1-f7edb8e42e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac9336-c0f2-41a0-a443-64bf23d3afac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2207fb5b-c47b-4423-ad52-e40b1d94c8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4b1435-9bcc-42d9-bd39-d7d1b74c2d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b9b4a2-ddab-43a9-a381-84e346d50753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64659f83-f819-41aa-b205-7b7d29383b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c15319b-2129-4c85-9b9b-3b1f5d72ee6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89745477-42b5-4978-ab60-e024a54f2af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9000a5a-78bd-4c8e-b722-f0cbea81f5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadbf092-878a-499d-a6a4-1af68d400a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcb9c37-af95-4a11-98c1-a5a0e2d20636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dc9b96-12fe-4016-803a-386d72a0798a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ae8974-a2c6-433b-bccb-e086c6aa2984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f591059f-330e-4083-954e-a2d5dcc4ea70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5273df06-abbc-4855-88bb-db98e0dcdc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8baa2bb7-2a6a-4bb0-aa6f-52afabac9ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72425a05-f25d-4b86-8f45-4cac8f485b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a09b26-381f-41c2-a15b-42e1217bbf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e975191-1e7a-498e-9d55-702dc23ca04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebd1365-00c6-461a-b48a-b13d5dc8e2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b4dfa5-5597-4b39-a472-bf9dfeb8745e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e310e1b5-2ce5-449b-926d-b5a13844da38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072584b3-f26b-460f-bff7-7be76ab23a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a792003-9601-4afc-9ad0-beae4879a531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90f075f-b16e-4c0d-93a8-4feab3c2556b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6831a43-3d03-43c0-a619-d75e8d21a94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d74645d-bea4-4cad-bbdb-b3f36610ce03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a915a9-e426-4554-bbfe-166978c8c621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa87757-4685-4e50-9d9c-3f96ea8b129a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd25532f-07a5-4a04-a184-36dc81821907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70d748e-ab1b-4876-9973-0223ec7d8a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4556b512-b972-4899-8e59-10bcb7b79f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0378b530-be18-46ab-b621-92fad0c2c7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4c2aab-0cb9-4a1c-9c37-0b3ebed894e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d5f09a-5be4-4e41-b5f8-ab9812c82ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a406cc-2986-4584-95b9-d1e149596711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38edd4b2-d20e-45e4-9c1b-66a58e19b215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a23edc-6195-4bfb-b5da-95f87d940829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e47ed3-e26d-4060-87e1-0b777fa16081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ed5458-da92-43cc-ae59-6758e2de4ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5256bf9-488e-4398-abc2-bffae168e7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afc4e48-1ebf-4db2-b58b-74431ba30953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b2c35b-609b-4af3-8085-5a70c2f0b046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1d966f-32b8-464b-9411-8787a9f64425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f60f98-aa0b-4ba3-ab32-5dba0b301681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e97207-8eb3-45aa-a8e7-bfd8464ca78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4175eaa-77ab-43b8-ab01-38aea89234c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea0ec8d-2a7f-4e65-9a00-2383f879228d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76294944-25c1-4b77-a01b-680d5ae7d5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38771bcd-3bbc-440f-a9b7-2119bf5e9bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65eea94-c352-4304-bb7f-9493dc4da8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80be674-1566-4876-82e0-fa0ec33aa59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22446f9a-b202-47a7-8ab0-86d0756f5bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ea93ae-3b94-4c2b-b63c-7ec3bfdd0e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dede130-c784-480e-a0d8-1f5a4388cb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94eef22-3b5b-4f00-85db-ce2a88fac752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d58b941-f393-4e1f-828d-f4c4e568ddc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1866a2ca-6ec2-44fc-82b6-8c84b3dfeb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993f2a9a-11db-47fe-8305-25cc6ab20271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93cbb3d-5ac6-4f88-ab26-5aa0dd667698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161f38df-e8e3-4d96-9233-062edd1219ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad86b6f-00a1-49aa-b195-997dc4474ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9b9cdb-c673-48eb-8e33-386af3b6a982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d2bdb8-5538-452a-beaa-bccbfea79ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216b3247-9dac-4f3b-a7e1-457366118424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f0fdf1-e2ca-4039-9084-45ca1b1a342e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3406f4-3ad6-431b-a08e-6dfc6749c139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d95b3ab-1cae-467c-8c2a-66bf03c07b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8bb8a9-9e6f-4366-b227-fe5b0f3bebda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e929e0b-6a67-4813-8873-ad181fbd68ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd211a8-36da-479f-8d25-af3d63e1a097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717bcfd1-912c-4cab-8020-fae9f23cbc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa327da-e973-48b0-9723-02a25d8d5442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3de6d89-c54e-48fb-af0f-9bb03e936f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3501388d-e39f-46f7-8bea-8a9447c5c592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905e8fdd-dc8d-4932-b4e8-8de1fefb73b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0593c2-5170-4bc2-bf9c-04b1ca4d31f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d370ad-06bb-4b2f-a546-379a2c4083b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7b17ce-a53d-4378-8ab0-de16f5b1f8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48381dce-bf8d-46a6-8464-5b6434bf3165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06f66a6-b38b-4e64-824d-9262985e64c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d70abdc-94ad-412a-8ddd-4107292cc710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ddbd97-faea-4f44-8dda-4c2a79882581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a14d3ab-05c7-4b3d-84a4-81d76067505c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c345e340-ea5b-4a1f-a92a-aeaf61a4560e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5b0749-57d4-4212-a2b1-132a9efc802f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9af76c-892d-4bb9-9c7a-0d416f308e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6282a754-2348-46e1-a9a8-1120c4b2ec8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df78909-a1a7-4ff0-8cd4-776bf45838d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caa1a7d-269d-40e9-be58-62e162fd30d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e3e012-50a6-4504-93a3-a7b27949feeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd5846d-a78a-45c5-bb77-235f4a9ed92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb42d12-a4e6-4fc7-8b31-745f052e6347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22efec40-c81e-4ab0-a4e5-42dfa42d0207", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.103.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924b755b-bfc2-49cf-b6ad-48b818d5b3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b281434-2659-4393-bee2-bea11f1ddf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da2512d-496c-4618-be03-5aeb855f445a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb888c3-c06c-402d-a85d-072b474e00e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844a9e28-1b33-4581-b43d-9c8d241a8cf0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.91.97.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c1a436-e40d-4746-863a-e7d733adf705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.209.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b434ec15-6aa2-40b3-9a72-502bd8dd1a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09070552-39ee-4bbf-b4a8-df0df2a99370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3960e27-ac9b-40cc-9c19-33758d6fb725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa996781-5d39-4abd-8b59-a333ce3ca489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1584d21e-fe35-4395-aaa3-0725d76ee813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2491320-f2fd-426b-ba9a-04acb39e57b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b96351-7639-4ddb-ae41-175463c7af99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.99.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06dc5be-50c8-49ab-9040-87f69ff5ca79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b399126-b806-47fc-9821-8f47bccdd036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f286d677-15d5-447a-b583-dedc4e9d4cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d71b957-317d-4f5e-bd63-1db654c7bf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e410f3-3259-414e-8bee-bf562a675206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a3ceb3-f45a-4478-80c6-81748b2eb1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a072b04c-ac50-4c4d-8af4-b0b143ce60a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f967029-976e-4840-8de9-91b35e79b664", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758f871f-d37b-4324-b1f0-d6d77acf6ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af444ef8-6c52-4897-90b3-a7fe74ab2b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f811256-0b6b-45a1-98f9-e024fe6b8b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f41bd70-c2a0-4b66-9c39-1c45f313df7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1628c83-9594-45fb-ab22-eca11ec54175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade54519-b514-44eb-91f3-fc99291ae597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c23f285-886d-40cd-b4e1-bcf35ffa01a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672d4093-fd67-4a21-b049-aae1ba445333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451fa95b-14d8-4711-8bc1-b3e674ac3db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa16182-70d3-4978-8f67-4db65c1eb7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c804de-b316-41ea-86fb-1a6faaf17b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfedd63-ce30-422a-bff9-beb25ea53a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3029f5-85a0-434a-a4d2-44ff698674d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb91280-5679-4286-934b-78b94976d052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d94a5d-7e8c-4fb8-92fc-f4ec2fb7daeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c92727-fa8a-4409-96c9-4967e7cd4532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564fb211-53b2-4d76-9146-70afa367e6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00b195f-158b-4e13-969c-b0fc5e1f5a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf2ca6d-4e52-43c2-8cc5-aa4923a264c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d03f53-7e3b-4341-a07a-e98a2ba114a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c3c246-d366-4c7e-92ad-8d69322541da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12d34b6-c962-4a42-84f1-974b63c9c0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5b9d72-2859-4557-9708-87b325786521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734c9b95-4d31-4334-9454-70c4461d7d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54c17b3-36a0-4c07-9ee1-175de3679e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d2345a-8f6d-414e-b2f1-237885ceb0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4f49b8-1ee5-4429-868e-17176457b18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1800eed-8a3e-469b-9ca6-a2fde3d2c545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f017cc-450a-41db-a6aa-cc3ac469e668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da2bb5f-d86b-4a9f-a7b2-cbbb94eb4ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68ca415-5e3e-4aa0-a084-4d0dbece8be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcde428-ce21-43e2-9dc1-787843986fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50376556-31c4-4c5b-b73b-d529b6c825d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1780a822-7d5a-4c0a-b09f-e752865afae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf05bfa3-6405-4046-9339-f8195a40927f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1967a3d-71d2-4f7c-b9c6-79912300c49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd88a0c-7625-4592-8486-00e9d7c333cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7c7d66-bbf5-4364-81ed-850570d83698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38610930-845d-49d9-b56d-977a282a6c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32584e4-d36f-4bde-9cad-575cc21366a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f53fbf5-8402-42d1-8a5d-c1ea87ff209a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ffc68d-c7d4-4827-bf65-3e78b70c7b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dd69e2-aef3-4fa1-8314-8bbb771396f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ff826f-27c2-4969-93fa-b4de1fc6167e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79d4bfa-d952-4443-a9f5-a926aaed2c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a40507-7220-4d83-a1d4-4138148c0591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb364989-40fc-44e7-a97e-f1c2fb7ba453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffaf9a5-8e7c-4ce3-8266-f1fb3d188c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f670f671-9d86-4669-b437-61f451dc667b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef84fae-98ca-4a92-b353-03e0d8175007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208db48c-1b11-4987-afc0-e81a32e55413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bf853b-e268-41ab-92fd-c33c0bcfd9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3c728c-b8c2-4a18-9a74-22566da198bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f554493e-7bd7-4097-93a8-1815edea4909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7dd3fd-b069-45aa-8a8a-67a792248e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b861c84-7d89-455c-b749-f0c842831580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68670467-6f9a-4bab-afd1-f99b2bec378c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a358a6f5-d0c7-4261-9f45-1c1e30172ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacbf24e-3b89-476d-b7ef-188841787e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cc7b5f-5948-46cd-b7f4-66ba159ba9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907bb6b2-48e8-45dd-97cd-0e4803be2f23", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.214.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11aa5a5-5b62-4a53-8a51-6577c7e04848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a997695-5692-4e34-95b2-ee955922282e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4c6e8f-d921-4ffd-9358-0ee6e3e26e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236bb460-13c1-4f04-83c3-3f3f92eea060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22ccefe-23e2-480f-b0b5-b771e4503255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fffb63d-6905-4bc4-b22d-38eca844e785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7da1fb-de52-4b2a-9545-5933269e6886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd52e00-f24e-42ea-8e64-a77d778777be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a924dd58-b1a1-453b-9b23-d09cabb6b3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e767c0-68e5-4535-89dc-e5ecead2c45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7645b2b-1b16-4b72-9bdf-addbf19884e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689428bc-2bbc-4d9c-92f9-157c73e11135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68eeeb1-d3cf-4d1b-9a0a-1eff46024d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fd5ac2-c0ea-4d88-9202-295cc6fc78b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84674930-1d92-4f2d-9dad-7b6f84125c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb077913-db4a-4f81-9b6f-07b5db540d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8d9730-ad33-4ca5-851e-0960e8b3763c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdff65ea-8bc3-4b82-b25d-c8bf8a2e4748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947094b2-4269-4678-bfce-3204c89e77fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e23d62-ca82-4a5d-9059-852918cbc339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae8c33b-589f-47d0-a228-9b161bb473c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b30b93d-e6ec-48ef-985e-68845b33d2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dc032b-5cf3-4213-b3a6-72f78ff0035e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.89.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fbea4f-d825-4a55-b61a-4ac2992fd82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1272484-6dda-438f-9b35-8c4aad67c19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bde8b3-8bc0-4191-bc6f-904b2826ec01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbed1de-2d86-4d18-af8d-5134af4d5544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.110.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b42f0d9-6101-4049-8c35-28f4be009f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a70366e-cfdf-47f4-8488-39c452da7b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621a07c5-e08c-4af6-a56a-a24e862d0f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8303fd-52bc-4f93-bfe0-46ccc1a4ff2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b7a1ae-79ed-4263-a2fd-aab7ad7a86a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36afba57-5fd7-47de-8d5e-b0b9136708a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc49cdb-c44a-47c8-850c-1bed9b39a6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c50812-a1cb-47b0-9a3c-9ceba8978b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca244952-ee54-4305-9633-7074439bc98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760710cc-889b-4da0-81fa-36d127091cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82a7815-d004-4764-99e2-bb02648c5e82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.215.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872e4887-0fbd-4e95-8b08-4046c913e761", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.216.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f69a272-5db9-4a2a-afdf-35636008fc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95416045-c562-46b1-8129-7678e5b71f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.11.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb601e9-5c65-4b86-8ede-4ca3d379589c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.209.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c16d8e-9c28-47ce-9c37-cabe86110f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.128.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e0d539-f75c-4158-bdd4-2318d63faa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.213.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01e3f0d-40b2-49f9-99a0-996b384041de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80d7ce-ea05-4601-89da-ac29c74fd840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6702a327-a723-475a-b051-c8d4b44a5382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.87.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6b3d83-316d-4797-a6f9-478acb0b7731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0b48ae-0105-4a90-9823-82e52373816b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7b1bf3-3cc1-4cd4-9b97-b5936c454d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc077b4-51af-45e5-a83c-d23ec1f23f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922ebb11-4d7a-4ae2-8bb5-df98659d1d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b674de-ad90-4ee8-a815-fd47e260b85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8fd97f-abc9-428e-a4eb-1ae0d9c5cd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5ee48e-55fe-4a06-ad1f-c101366f30d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f66a840-15e6-40ad-8bb0-f8839fffb088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a965b03b-373e-4bdd-aa62-f47fa41e602a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.131.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1586977-44b2-4697-96a0-070363d1b506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.65.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbf5a9c-fe87-44f4-b1f8-6abd833dad5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.24.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb14698f-098c-4ddd-bf4c-c448e9d1b448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.62.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab39a33-f10f-40d8-9798-4cb895e4c82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe21f0f3-bd43-4e56-802f-77ccf0e623f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.227.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247f2681-574b-4683-a55a-acd810d1db2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.250.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a16bd84-af66-4bef-a47d-f336a36bebfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.132.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33620be2-d276-4896-8450-0f6a918bd6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b192fd-2d74-4078-896e-9388ef60072f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1a3edc-961f-4153-8133-bc2ca4d8d1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98043792-27b5-4956-9e79-ba550a0c5fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06974b35-a85f-4713-81e3-d927dd4fd355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.82.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5aee80b-0072-4d3e-979a-8e6dea2baf0c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.170.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c631122-1aa5-4f1a-8827-db92b453f0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.136.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456efe55-5e57-41b3-bdf7-8cf9893a5073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.142.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e704a1a4-73b1-4cf2-a734-c17bb63c0aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.54.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f7df3c-9168-4db0-ad09-1e71f72d8321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.0.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68b9759-9593-4c8a-9cf7-b63a53945d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.103.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79b0d44-f582-405d-9ed2-59987960aad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.50.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c596e0-6012-4b30-a7c4-81181fa607af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.59.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2153631-fca1-488a-8652-e539d6e07352", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.65.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11145372-b634-4d3c-87a4-e2deeab09e32", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.137.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ac634e-ff5f-4373-961c-1b2a3ce85a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e07a417-ca87-42fe-a985-f1edb9f71d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31999e59-ae0f-47f5-8109-5f116f5fb80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc784555-1475-42f7-bcc3-57e4732df443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abfb345-5dd7-48d4-8028-5325956f80a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fde254-eee7-407e-9a6f-f4ea76ac4925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bffab6-5838-44d2-b581-08900f8a43c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973e3e20-5f3e-4dfc-9611-d2e6e68fcc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477c4993-14b0-4c6a-8e66-27c5b1ba61a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e39b5c0-7b66-4b9b-bc6a-b520c41a306c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62be4a90-2f2a-45a4-827b-c9d085b80286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77a3eb9-ce12-4ca3-9d45-dd723ed225fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791c5cf2-1c41-4b42-b81f-ba6634ca4a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a429650-9d05-460f-afc6-087d1f91251b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649bea24-e56d-4b91-9f51-0cdd4ddbbc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c5291b-46e1-4a88-bee9-3fb130b6560f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244cf767-be20-4ee8-a70b-fe1412eb6f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f440359a-1397-4f15-be66-3762e0087c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936a4893-364c-45fc-b527-0f9802135bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed4b308-3a1d-4ead-b10b-52711afcc081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9f517b-3b51-436b-8dbe-1e10f90e82c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88789746-b446-4704-9f58-fae02052c7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545072ce-31a5-43ce-be80-ad7a62706deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6584eb45-3a20-4fa2-9de2-b54bfa1027dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cf9e59-e19c-474b-a914-9763a0fb5d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3761dd88-0382-43f6-a762-03ab67c1b1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab8c0fb-e23d-4b23-a835-8ce93a07366a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab34ce34-c1f0-4d2d-9412-8e19bbf38e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e854f1-55b7-4e98-9089-95f497ba7275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce2773c-42ec-44aa-8cc1-65b0518d086a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1e6cd5-bf17-4851-9647-239984cb0e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bda738-e57f-4ba5-ac2c-33b4dbc2efde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc622ac-54c2-44b2-afd4-d6873b807be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a764f4-dd70-41bc-9b30-251e5f2ada5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d80158-f0b6-48d5-b23e-0502a3ad9d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ebca18-5c49-4660-9ba9-faf146efa2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be19554-0763-4048-bf1e-f6dc309af09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4c7803-d68f-4a2b-92aa-2daac98f151e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee17aa1-17b0-45d2-ad4c-f27fbf9ebd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ca9a25-366f-4e5a-bbc5-33582d6ed02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b086999-eb38-4b19-b7f6-6527312ed88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12afb9e-d224-4f83-af36-d7863a9150c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d17285-256b-4013-a331-85bbb59e02d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b2da5e-c67e-422c-98ca-5e2ffb76b8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e358d2-9272-4d83-9923-420785614339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7301dbd-dd15-43ee-9f3a-4621208e9d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7033bca3-de99-4c4b-a65a-ff682488be8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241feb9a-6c76-4e18-8874-8eb59802e95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6bfbd3-a34e-4545-a506-512bc252e57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f059fe97-7abd-4dd7-9143-557e52f7139c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf00b30-ba7d-4fc8-9245-1fa2575ccbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc37c213-b1cd-43af-a610-af9e2f19bf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cfa777-d640-47c1-93f6-120f1632904b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415ad328-df99-4247-bf2e-86b78fcabe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b0a390-eaee-421f-a948-dcce34491a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f8b9f1-ef7f-4a8b-b2c7-6a872347ff74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c66f2a1-8bc2-4f9e-bb43-9d0a9c70543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaae174f-8f0f-4334-a4f4-d5972c396165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0866593f-71f2-4bff-8ac4-316c537840ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5502dae7-53d5-4f95-9f90-ec95e7bd8760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7056776a-cc8a-4897-a92b-0f662a883a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12b6bf6-94c9-4938-af5a-2a68b3d0f87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa5e474-3e87-489c-963e-d3139bb3ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a30fa8-e908-4e01-af57-2eb90617e8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e148671a-3b22-4035-a1f6-54a91dcaafd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2309089b-9f09-44c0-b0f2-6210923af208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b013d1c8-a665-461f-a4c5-06f77df3bfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b2f4fd-8119-4cb0-9dfa-39c3a8200ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a34a1a-edbc-4df3-a836-5e2d3ebdd98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fe0999-d3d9-4b54-ac73-f5f3b4584996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27fcb91-9f14-417b-bbba-866bd8e3e634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cb2f58-db94-4e65-8210-a96a040d0794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eca76b8-b629-4559-b26d-2a977fddd621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1e44ae-3b76-4693-ab8b-7dff32f40c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c1daa8-6f41-4289-9ba4-7e6a40108818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c183a1ba-2f8b-46d3-833b-74c2fe20c515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa95cdbf-e74a-4fbf-8ce3-048c3fc03851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c914327f-7bde-4107-8634-4fa299a2942c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13843c06-ee3e-459a-ae33-abc372350c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3792ab62-8a6e-49a6-9688-ff15f373c3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052cc05a-dbaa-4310-8ead-6d77986583e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80321bb6-8931-40ee-a1a6-e5447318549b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6594bb9a-3acc-4938-96dc-ceffcae447e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc3d432-0220-480d-b999-240f36e63a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7922ff3-81fa-4501-aaec-f1ebabe25ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e035b80-470c-46d2-83f1-7e2db0163a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3fc8d2-f5b7-4cd5-97ca-1c7e2371427b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340fac83-89ce-49df-a9f6-bd4ee219f122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c6dcdf-3b63-4149-a987-6a84f857f042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68333c88-7cc6-457e-9f55-40e20fb97c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa9b252-576a-4870-8812-6e4cffd6ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5a69df-80c1-4283-8276-33d77377540c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b114bff-a6e9-4899-a96e-204dae9d9ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09bb261-bbd7-4de6-8461-0e6057706eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbd7084-480e-4cc6-b8db-28057cff41d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a926fe-4293-47c9-9baf-7739bc7a491f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da11233c-f4c4-411f-8937-cfd44aa080c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af19dc28-8eb7-4d59-881d-29804435dfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43783ddf-6317-47c3-80bb-d97e35f050c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5e4aa8-5ba0-4348-925b-c7c9235cd6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2551f84f-c659-431b-a0ca-98c7b92f8d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241fd794-9fd6-4e37-9632-b2e8550ccf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e096ce9-81c0-45ec-aab6-3ec718603040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333a4111-7195-455a-85b9-1d47c8a4bc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdf8d49-0731-44ba-a1cf-c6fd9b7c7a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02803172-9c1b-4309-a7b9-876e71e1061e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bea493f-374e-4468-9a51-cb72b5d3e7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4804cfe-4c8c-4abf-8c48-224d33911bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c004726b-ab0e-4768-8768-0443bf160437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa7da93-e249-4f13-81e1-e00f26c300a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4829f7-d060-4ea7-94fe-c6cc189f18f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b36e678-47cf-4678-aff5-ba55c55a3cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48432703-1dfc-4e89-8e6f-6b94223ff4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb143f1-7607-4a13-9920-bfa0b10411d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeff0fb-b146-4673-b15a-8432dd7db6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057bc9cc-8f6a-49cc-b0b8-1c2be69d1203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abd4fec-d12b-4d15-9f1e-82387c413ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84573cf2-2ba4-4fca-a15f-871377823923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc029ad-13de-4db5-82f7-3c43f3da138a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aff36f-d55f-4d33-bff6-053e33a0d8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42f14b1-d2b4-45eb-95c2-0d42d08d4eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6288c007-9722-4555-b3f2-9e13a546fbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c8ed00-652c-4cb6-8afb-350f9ff36394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5b86e3-9cf6-484e-a228-827d282940cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e960de9c-45a9-4f9b-854c-280ede11018d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eefa2c8-8707-41bc-afbe-4af86c99c061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fa4ae8-f522-43bc-8b81-8cc08f035f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea1a804-6b4e-4f00-860f-a7877e34101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce41e2b-14b2-4c2d-84cb-e21870aeadf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ef0370-8c28-47c1-886f-18cfdf56b9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b159e05b-3dfc-4c9f-80f4-3cb842845d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc7e9b3-7d43-4330-bf1b-bcadb39a4456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fcd97f-4df9-4b60-b37a-aeaeb50932dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d697e6-40cd-46f8-a0db-af39b0ee4393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8c2087-b421-4e41-8bb6-651e7bd06b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeeaa2e-b943-40c6-8ef4-030a7ed006c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50726e95-bc3e-4b31-bd35-25d46a6f0f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2919fe-d92f-46d0-9938-3b7d56e5efb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef096275-f71f-4978-8e7e-f236ce8c17f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91a47c4-94aa-4468-b7bd-6bce5e48668b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173d0192-3cc1-46ea-a12a-ed50c137ff32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd43e25a-3be3-487a-9495-5c746ab3bb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcf8510-aac4-424e-b121-2dbf8f001088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4dd284-0790-45b5-a151-9018fdd96bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fb57b4-5e02-475a-a948-3affe7b39980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5516298-4a79-402a-acaa-85a2dd285537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780aa005-a338-4ad1-9b00-22f92ede15c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4add9078-4ac9-486a-bd4a-c082bd13e5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d23309-f45e-478e-9546-4e0010b18559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e001d8-ff7b-4a08-982d-7c1b109c1fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971d6331-c130-4ba5-98cd-f595d3c4f379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c4c414-e40d-417f-b0d1-98ed98569e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8917db42-dfd0-4aac-86ac-87e984cb2c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8994aa-2672-44e3-8024-2678d0f3c795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4700959c-07ac-4900-a6cc-f570efc54027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da88829-b400-4598-9e04-361abc5e6b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc44935-005e-4a61-b658-78e92e1fa98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e321a8-8e61-429d-9250-e9560776ffef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d671aa-5439-48f0-9112-1e4264cbed3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d001ae6b-04f7-47b3-9f2c-009f8bb76df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f74cc4-3ad5-47b5-801c-40480f43c139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c66bcf6-90fa-45d3-a151-aaaeb99a198b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09963020-e5fc-4288-be00-b03e0a97f312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a004a07-ee57-4685-9d36-e69dfc0c92ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1ad381-5140-4c4e-aed0-93775891b615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea78b13-46b0-4b8a-9941-eec6f0be3ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9c4723-4452-421a-8695-6dd2955218fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56eabea-164e-4bd6-acb1-b2c46f3b0ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac3828a-0eb9-4d1a-bce5-0e237f65984e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab641768-026e-4f17-8ea2-025a5b49c152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbe2b0a-0d83-4fdd-9544-d9ef69b2e070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9617f00f-4a10-452d-b2b6-2012f77ec699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7493dfd9-4dce-42f1-9a73-7e177502b0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d627c6-d115-4238-813d-01e555f997bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3dfa05-7b50-4b3a-9154-e9d5e99dcd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa77317f-4f1a-419c-aec7-a057f2c94b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a984d4de-54c7-4689-a5c0-a92d9ab1036a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7176cc79-4161-4067-b143-923ff9bcf0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1b45e0-c713-4641-ac34-5a2bf284b0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9d31c1-0653-443c-bd63-6e64912c44a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78f934a-d797-4bbf-a964-9bcb9a7fb8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5667d0-c0dd-4a6c-bf91-5d7a01e08086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd0f060-9fc4-4e07-8d51-b62ccecb61ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fbac0a-690c-42aa-b000-93abbbac9dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d95e64b-2553-47fb-bf92-a3be10a33d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845d6a7f-e222-43d5-8809-d145c455d050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd39ef5-1a5a-48f9-bb19-9cf2b6efe3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f10883c-f72f-422b-b4e4-54c81f9ce642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac29a5b1-9cb2-4710-b652-2f0c99da14eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4054ae7f-df11-401f-8fba-1d7d6818fb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e20ba8-e06f-4d77-8683-08552103f5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f04e14-42bc-400c-941f-2fb3e3dbf5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dba285-801b-4a98-9c33-877a6433bfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20b9966-b754-4947-a886-5030af31edc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eb84e9-991d-4f38-902c-f3300dc41fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c817303e-f636-4a2f-b503-c7e08465f44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226654f2-cd12-408f-a56b-5d9801e851f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5446ed7a-c12d-4329-93e3-425db26ee0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a69c66-21f8-4d6b-88ed-4ebcd16a37d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da999dd1-d13a-4fd7-8379-1ae0a7f17344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b108e16-3765-4cfd-b70f-0ebb4239d1fc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd41f741-acc0-4794-8d60-f8bc5a25d489", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af90b222-bb1f-4288-85da-7d3fbd302ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c02b1c-97b0-4756-852e-d5e4bfbe5733", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.153.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba2c7d3-884d-491b-9904-85a7b46a77a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.154.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1068ed-7034-4909-9dca-c322195147c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.113.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025dcecc-b390-4eaa-ac47-d60b81417fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.123.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb15820-c0f7-431e-a193-a6648dbfc806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.190.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e140b1-0a8a-45fb-9931-2037cedd601c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.74.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd17349-a59d-4ecc-8934-1224036d8417", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.85.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df6c750-1ac9-48b2-a42b-878f906e09f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49198216-ece7-4204-a2e5-bf84c112ad69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb053c16-ac7b-4ed2-8c07-4418315a0785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b828e34f-1460-4ef0-88a1-985ed046b558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa475e37-18a7-4c4f-bd57-3a24bee40873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdbe827-5659-4388-aa36-b3ce6b416b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1f18ba-96c8-47cc-b0f3-33d5e95be869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a9e198-71d8-41b6-a75e-abfc39b25ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f5bd26-662a-484a-bf30-b451a1780615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5a5a8b-4fdb-47a4-8b07-90430529fe1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ed5fd2-7e2c-4e09-96a9-9faea19ca0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750816a9-21b8-41a6-ab7a-85592e8cd53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0922ff82-87c4-4f4e-a4fb-ed17ff4f95ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25555d7c-2262-427b-bd39-2746f9dd3cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ce3ac3-ecce-4e39-82af-ae0afb52d5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc52ce34-702e-4dd9-8904-8144d40415f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0def953-3d69-46be-953c-2252529d5304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e97741-d700-436a-a6df-f8d283d33e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2face8-ce9b-43fd-9b79-29ef744e3df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351e49b2-fd2f-48e6-b3d2-e8dd7e5c69f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b3343f-e81b-4060-b97e-cfe3c5589940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b729b5e-d9e6-4539-9715-f30af8512103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59ec7c8-9307-49e9-8844-108a0e4baac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9149452c-c5f2-4261-9332-69bac0930341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3152314-e3ed-4b27-a529-6a9fb66274ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5222258f-cc31-4446-9fb8-bcbf2f2e7d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d031891-0a0c-4687-ad58-c7bc300b030e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75dae30-2d1d-4328-83a4-953758218043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b1cf47-032b-4425-842d-10edf364ff1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0097f1c4-bace-4d18-af88-d64ebe175b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf6a9d0-eafe-4a45-bcfb-1111a8c4ee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976ab418-3bb9-4c75-8871-19732b5d0755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650544e8-7874-4c67-9164-f490fefd1cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853523c2-9834-414f-9f4f-f26ce570715b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d68e6d-0253-4c91-93c9-b92f4bb588bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b184cad-349b-4776-9e25-e08e51ba51cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593199e5-dd33-44d6-8103-7c63fec17e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170721e7-feb8-4007-bd6d-976f67e78bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192bd228-986c-44c1-bb36-24401a1738f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c4ac91-4ac8-4ba4-a84b-028f31a0e523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e12fb7a-f235-40de-b9f4-78bcab4cf1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1d5d37-837a-4d3e-8f68-5db5276a89e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792862da-bba0-4ff3-a36c-3e39004ed518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a94cb9-9a23-494d-9233-c39a1b21ecd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111f4a3d-18e6-4567-bdfe-5511fc44a1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f09129-b283-42aa-94cd-942571a09811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b332d8-9aa5-41fe-bd93-6259679ae970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90741727-3cf0-4b23-b4b4-9f89f20ab7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf9e49c-c146-4d4d-a6a7-c9004631a999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae55b7c-601d-464b-b967-7ec11065fb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fbd21d-0480-478f-82b6-3b01d2b3c252", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.200.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ff96a4-fc89-4d4c-94f1-443003ce46f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483d440e-b82f-446b-acba-61868a2f674d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9e8a1f-3390-49f2-ad14-321d92c62271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531f3867-7e38-45d7-933f-cefb69bbdf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37552ce-6f9d-426d-a12a-e4e13058f1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ee60ca-bf91-4fa6-be63-1db269f065e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5dfe3a-0590-4003-a45e-febc59057e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d869974a-41c4-4b5d-b3c4-bf66cab665aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559df7c9-c299-450c-8cf2-ae542d28ac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d3f798-0c8b-432d-b6f1-3ebee20c0fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db47ce80-6526-4388-9668-591bb0ac63c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89efc32e-e1db-4c2a-bc81-c27092c83c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca18a71-c51d-454b-8d51-1f2a078e2f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78565d91-948c-4b93-9b67-4d6e347be1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac02099e-c874-43a5-8f9f-c8f331a7a5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab95064-1bff-4fd4-8e94-ecdc5e86ed42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1c9c32-f478-4b7f-86ef-3a6ca10375e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da2d705-f6c4-4cf7-835d-1d0022b6fd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6785c89a-b67a-4cc7-bc4b-4821c2e5ec57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1fde6e-8ebf-4f57-b020-c9643447b733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70857290-4f1b-453c-9441-3146f983b40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f2ad1e-49d9-4cc1-9b78-c274ba4a25a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32c40c6-2510-4c21-9cbd-7bf8145c3f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb6ef52-598f-4bc7-9e00-9d805c602940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a9d4d5-389d-4ecf-a0ba-77fd8bc06042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1acaa1-ba65-4f6b-9b69-bcc662113903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9648ea3-e26c-458f-b783-c5610d039a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8999ec52-de1e-4195-ae14-713ac7dea3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cc9999-9427-4e73-a5a3-7e92b60abfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48c9544-3864-44bd-b744-95c38d3febaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83db6ad-4eec-43c7-aa87-1391656787f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f3a587-4bbe-4ea0-9198-d45232e2132c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b049863e-c45b-400f-a68e-3341bfba7119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.101.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf8b74f-31fe-419b-9c4f-a19d7e6312f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.190.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20196377-f331-4c3b-b972-0debd1d90a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffeae4d-15ad-4384-bd18-60db3749e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.193.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c86373-abc4-428f-a35d-6d565d0f693e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2891192e-78de-4df3-a2d2-27ed3414d38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.26.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594926c7-7d8c-4cd7-a005-e28c0d777266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7e35e7-1351-40ef-8d4f-fcd8b9538496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.131.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0a68a7-33f2-47d7-89d0-f018b24c5b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3e0653-6be0-4698-bdef-81eaded154e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.226.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f11f73-81a3-448a-a781-d9778780490f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.237.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468e898a-088e-4905-8c84-2a7a75eb0f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.131.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f783f1-f33f-4815-ae2b-f630b6b83d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.245.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f5736f-ce82-438f-bfc2-d3310333c420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.40.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bb2525-4f60-46f7-b246-027a94522021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b634e34-6b85-4501-9ede-17babd1f38f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.93.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55776b8c-af2d-4088-bc27-551ac919fc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.175.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c294b5-9bb5-4ac6-9977-f38f0f41fbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.202.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eafea0d-62ec-47bb-b7db-54620443d868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.87.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e3c244-eb14-48c6-8253-7c3dbfbf8053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffa71f1-9993-4aa4-a1fa-b89e104cba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1f8a19-6409-4869-af58-ab457431107f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cbcdb1-b58a-4835-a737-58bcc3d9c09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17e3002-83e6-4d00-8342-8e5e254325a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fa1faa-52e3-4b6a-8233-3086d0e70bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a88a7b-bcd7-44b1-baaf-eb561f117e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cab7104-f8d1-4d8a-85d5-b1af369eaeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df64a027-ffb2-4c77-995c-8f255e181fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0b301e-2f22-4e4c-be06-1d0f4868519f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a56008-d6ed-4f55-9200-dfa2ebdadad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5cf5d5-dc1e-4d92-830b-e8dca8270110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff008c28-274c-4852-834b-64820eda28c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c7a129-c13d-4dbf-b0ec-d662f2daf534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9364ebf5-7f51-40dc-a2c8-c718d44f2ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e48a4-705e-40f4-b749-853e13965063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d62323c-157f-43a0-80fa-412a0b085156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd52a5bc-231a-48ff-996c-079336cebb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d348bb43-3741-46d6-be33-d18dcd3c4a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ccf0b7-f08f-4d49-ab55-77db52fd8d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b1c716-c199-49b2-9935-22c4992e5bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adac9224-da9e-4964-aa06-e4d31c05bc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c25a42-6c2f-4f32-9d7e-2b22dfdc40d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9afe4b7-8bd0-4417-bdbf-b4896a4d2476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e58dbfe-e3ef-4d36-ac2f-02723da43eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525781ac-9777-4c6d-941d-84b6cdd8fee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a90e492-92db-415a-b130-694b947f2d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eb2307-5cc8-45ec-9d40-6ad501a4bfdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfb8be8-361f-4b9b-8d70-8d4ba42df868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d170640d-3668-423c-9beb-f5a64cc84c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.116.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b754654-31cf-4f62-bb39-af29d8954b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.20.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3f34ce-af78-4716-a169-90f4da9664e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.41.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bdbdcc-2dcf-4f85-8a7a-dddab210b84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.194.64.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c42eed7-c29f-4fb3-889d-7ee5fdc1f5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36eb9883-76b1-4e25-a36b-18c8b2360f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.110.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeafd9f2-bd5c-4591-9e30-7308738de3e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.179.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a344b9b3-d427-4fef-a3a1-0eb948800c92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.65.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2c310d-fe67-4810-b142-e4eb1a0496fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e68ec95-9daa-498e-9642-31b77ed9fe0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23693781-9688-4467-91b7-d732de002c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea27a7a-e6b2-444f-acda-72a6a4c1fff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc5679f-7496-4ed9-9a8b-8b9526ea0912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b989d4-5521-4c55-adeb-13eebfbf0743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7169eb-023a-4dbb-aae9-d04e3e533eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090ab466-c245-4166-8346-0cce7f46262a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859f00c4-b3a6-4fce-93f3-d72f149f8af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.155.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a0085e-4d1e-4125-87a4-6241040d697b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.185.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0773033-2056-49ea-82a4-638cf6e5ba90", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.199.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d57b20e-01aa-47c8-b86b-277a8c646cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.88.175.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4546a5c-2a63-467b-9ad6-924157688181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecd17a6-fa03-4234-b792-0829b5e7e8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9673881-187c-4ca7-bd43-803d9b2c07e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.224.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f89e77c-b882-4dab-9df7-9577c04d53bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f92a7b-8d51-4bce-954e-c10ed1cd6d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb5e283-bb67-4eea-86a3-ecd6cb11d226", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255114a7-b8ca-4d09-894a-7bb88594f4ae", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a25cf7a-aab3-4646-b133-1632df305610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a68b96-baed-4e1f-a475-07d2d2e87d22", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a548e50-c34f-4e22-a12d-3f2dec3e438c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.16.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3222d44e-e754-4233-960b-3e92bedc3f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973a5caa-2924-49fd-b9d2-d337ea9b50ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e0474e-0e51-41fc-9e52-d6d9cb169dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128970af-5890-427b-8839-d35222c7ed61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e484e67-a3a9-4e56-b1fc-807410b40c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852fd55a-2a1f-4f1a-8680-12a33268a285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c346348f-a266-4f80-85cf-3893f35875c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fc4ecb-4a1c-48a9-8e1f-4a1d113d43e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13df6513-bee1-4e0f-88c2-c0f77f31426b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.24.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c225d0-377d-4a29-a392-b8b92657de06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57819469-733d-4dc6-854f-e78eb605e442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.67.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1053fbb9-0c60-41b5-8624-cf13d4511475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bd4cf2-b92f-4bb1-917b-b0b7f6352d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325dd918-d581-4f13-b09f-aa0c32cdb414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830972d4-2fd2-449d-becd-14080ce4c0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190d06f4-d1b0-4e65-91fb-41df7fe72c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9170af72-b016-4ecf-87f7-d9df1afd9454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1882e5fc-cbff-45d9-bff5-9744c2e9db06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a427de-13ce-480b-ace2-91480a07aed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364c6f83-c3d6-4f03-8646-cd096868917e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85550318-daef-4c17-b511-f09a6a1f61ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d44222a-3404-4d1c-9afe-3aade19d3011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf79ce9-421f-49ca-922c-9a45f9c99401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9817136-e025-4d1d-991b-749ee0af28da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8581f204-5b16-4a11-b6f4-2245c3d59f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26543991-e405-4543-8c69-e1ca617e3013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfbb171-8cb7-40ce-a2d2-00250598d4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f9b7f4-ebfe-4f4b-8eb2-d9c538a7d542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f0f573-6ba4-46fd-aceb-9d7cd93bd6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591bc691-e015-42af-8441-5ed430629247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9a1ee1-9122-4ac1-906c-e25bd33142f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ee557b-314c-49ed-b802-0c0e5cdb1144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28c40b0-b285-4ed4-bde5-d58983e113e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86966bc-464b-400f-8cdf-0d6bc89d004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fa4c95-6676-43fc-a475-9ec22701704c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cfaf3a-66e3-4dbe-ad17-49bf4d968734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90340b9a-6905-4f41-b17b-e3f42cdd433e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edd34ef-984a-4f89-97bc-8c850a7d9ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0be65a-875e-4889-bee0-592983b862f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5de364c-e7a3-4621-bde0-9dc45c97f285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50719ca1-67af-4ddf-8de3-86b688e7332f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f29821a-8d5e-4f5c-85e2-8c58b3de3da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4011068e-4cdf-4fc3-8eb2-f965b0111ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7509192-6fc2-4f16-81f4-31eb446f9a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e9076e-dd71-4475-b99f-447a269b1037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79473fe0-e6ee-42c5-8baf-ad12afb40588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be79a607-4dd1-4e1c-a212-ca43bbc1401c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e70574-3cec-424a-9206-6b1fa9df1108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db439ae6-8f49-457a-a18a-cfe1e35a0f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.143.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2697597d-f6a9-4159-8d47-3205a84b83fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8170b95-7daa-4c5c-9560-b29578b3a3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.25.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178b63db-3f26-43d4-a0e4-bc80a39cfb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62654e0f-b4ad-4a68-993d-a06452c063f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd3222f-464d-416a-9864-2427906eb65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.108.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9dbed9-6439-4b49-9ca9-0c74d5b8fedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031eea0f-5249-44b1-a6db-10211be235c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aafcc3b-9c0b-429b-b4b9-a96f2ecbf503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbea28af-a75b-4aff-a35b-fdf063d4834f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65831372-5c8b-4bb5-9b67-fe0762268ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bf823e-ea96-4f94-8092-bba726b5180a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f414f5a-7ce1-480a-85d7-eb94ab2ad766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfd571a-7c53-4a3e-92a2-4d2b164cbf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccebf11-db12-4f72-b4f8-7a408cdd6ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0ccca8-c539-48b3-8b8b-5ddc70b3b33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0434bd3c-0811-4705-b361-a60eee69b16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d0f375-55a5-4da8-b625-6746dac96766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.114.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1019ae78-b0fc-45af-972e-27698c7979af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3cec00-c7b4-464f-bcfa-84baf20b6806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7592e436-093b-42ba-a553-43d7a56ed7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b24bcf-f8e3-41b2-96fa-3a5331975e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb13f7-7531-41a1-a08a-f933e47cf8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e12e4e-9330-42f1-b451-5d624a921efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fd173b-a1dc-485f-99fe-43c7207b6f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ecb7ad-b148-40f0-b397-52529eb6130d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef984dc4-dcb9-45ee-9ce3-669e04ffaf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483d24ca-76b5-4ec0-ad63-e9b0b8aef68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbae4d6-8516-4521-b177-308f6c95f33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eac1e39-4b3a-4071-85a1-ec93ca35b176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3055a72-503b-475a-bd26-27bd36661e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853e439f-b7b1-43ca-8c4c-0284906adceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e71138-04fe-46b3-8057-b1cd56bc5120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a15175-d7ea-4e4f-ade2-93c7034cf296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a632927-c26d-439c-ab89-6c4f945e8239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549d0b23-f736-49f9-bedc-92670951349b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2411aff-3b54-473e-ad66-13493547efef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16b70ef-6c46-424a-89f7-7680ecc1aa91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77d31b5-29d3-40df-be79-00c7e530f5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d71549-f584-4858-adb6-af4ef12f96e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ef75eb-7f33-409f-858c-0b728efa3b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0069cf61-bb0f-4c4b-acbe-961a5fedb5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c501b51-8bbe-42c9-bdba-2097764b529d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e54113-9b15-4e93-a6e6-92736cdf37b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a103c0-cbd4-4646-bd2b-eac194a44a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.91.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d876e16-5dd6-4be6-9985-0f53fb62db96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.144.218.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40000f61-474f-4146-bf21-e19b1af9911a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c57df15-22d6-4db9-9c6d-163ea2de47e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59c0886-960b-4c4e-8298-51158dbaa507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd8c1a8-713e-4565-9909-ddb2522b4179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27661588-a714-46ec-91b9-10faa9feb6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6314c7a-7dcc-4baa-910b-306a7f37721f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdba375-d117-4b7a-bc56-29386afdef96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699f50ef-2f4a-4bce-8972-178d18be1aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54577c09-8c1b-4f00-a025-4b44c0291d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e56857-6551-4a8d-918d-e61a6a5d2cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27793218-711d-46d6-a469-6c5f4c954d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355e9e12-4ed1-41ef-af38-b4c197539f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6b4707-fb0c-4535-a7e5-7ddd6eb5d8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de73846c-a63c-4e55-a3b5-c51bad5f07af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a8e46-1a09-42bd-a80d-5f195806f54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9708222-cbb9-4226-be81-94868cecd52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a7b117-00f7-4a76-8d4c-863579dec9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a71f652-2321-426e-895b-62844c46fd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e322a3-6e5c-400f-a105-a1ba7f429f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f499c1-2c0c-405f-9a40-5807ebb0c9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.77.8.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43ddc30-6dbe-4c0b-932a-a8429a35087b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.154.26.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202184a0-6621-4261-bb78-f70453424e95", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.53.247.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4065a326-d318-4201-b2db-04bcb2cdf812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.92.66.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08387ca3-4bdd-4eef-a381-907d8b3d477e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.121.59.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572d9ed1-5aa6-4886-b26f-6ad6f0918249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.235.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e56f566-dd99-4e85-b2e0-08830f72b619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.153.178.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f0c285-b98e-4ba5-b906-8c2e1e054fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e51940-f3f8-4f80-9e50-f72cb95ad3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.177.40.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f50672f-eb0f-40d9-b2f1-dab4d696bc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc2ce7e-5360-490d-a77f-340640a5ee2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5710d52e-12db-492e-be2a-549a172f2087", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2331cba6-fdea-436e-a240-2283c4a6b2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.198.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afde6ad2-7d11-40c0-b624-dcfd738303ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.219.168.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb85cdb2-907d-4395-8427-14680893a7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.42.56.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185c9d0c-ada2-4c7f-bfc7-d12dbdcedf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697de8cc-3097-4e2b-891d-576a3fd952c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.9.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0c3b76-7214-44f5-a300-5db073711994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f1e1f2-781f-44e8-87d5-4d06cbc4f70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac6cbd8-c853-447f-9842-6300c62e5bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8e2404-aa37-4c83-b9b2-21c46cb94055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720942d5-aa31-4df9-9b21-92cae991992d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f79915-da2c-47c9-8849-ec736f8ec0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618a6937-da20-4f09-b448-a574f0f32642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d049e15a-6696-4eb6-90f6-c1aa7997a826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea63322-3a67-4113-8534-aa2360f24d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aae7615-90e1-46b6-a39b-77a9409bacd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1510162-ad39-4439-9cdf-02bb6b3ba812", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.168.24.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f410de-e684-4baa-803e-c42359459290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.231.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fd3821-1dbf-428b-932a-cbc22acd8b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8710364d-b62a-4a19-b54c-44e8d6009bae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.234.33.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115cf4ca-db30-4aa8-b1e6-0201f0e0b7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.28.27.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac6c540-428c-482b-a102-590df39a6295", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.51.32.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52eec69-b743-4c37-bce6-a29cd88aac17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.94.194.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0aa296a-0b10-4f1b-8560-7279199ed4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.136.211.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee6de26-4188-41a8-a98e-40f0f626ae2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764653f3-e81b-4982-9b04-cb32ed56d198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.216.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd42c96-0ff3-4814-9fcc-239150701cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76475bc1-412b-4bed-a882-b2299792345a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.44.39.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3ff2b7-9fd0-4a5b-aea4-4f3cda27df68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e2fe29-241c-4052-b070-acc48a0a281d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.74.201.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da068bf7-6c70-496b-82c3-08f8fac713f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.213.156.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8187fe62-c05d-4e68-bfe4-1866afe03c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90cfaa0-8b74-43da-952d-787f4efcc577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.243.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c684d1a-8890-496c-9e21-1755d3b55670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.66.138.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8a4549-092e-4e84-a370-449d357655e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52144d9c-41d3-4e10-a576-a70e13183ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587b91be-ab98-4f11-a72f-481db7c28a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92eb9ffb-5432-40a1-a3d4-f2c8e1a60738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d617e49-444b-4b86-9beb-023f1b17ef33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ad6acf-b9dd-4e86-b6f0-19b74abd92fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0944acb-61db-4df9-bc7f-3f33c63625d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a68091-319b-47a9-afb0-2fb277065e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d548b011-f79d-4b75-b94d-bedee52e5a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bf285f-336c-4687-bede-a21dd07d2258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5927a01a-3b96-4fbc-858d-f9ea330a6df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa01112e-4fa9-492a-8e3b-918c44d7dd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5957ece1-1e66-4597-bf57-e8eaf3867b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e331286-63a7-4d7a-94f5-5c255c4f4a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a77133-b0bb-4658-b291-a90f9e2a5dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50818836-02b5-4b1b-969a-39488c1058bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96bbeeb-405a-47d0-9f14-e772d1b04374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3352132-d153-48d8-96d3-a74e083952e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b067b25-407d-4fa2-9562-668d7e017832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fcaead-8c88-444c-96e3-dee2ad6bdc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a6cacd-f20a-4e04-957e-56ffce20c926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd8f2e6-d5c4-4abc-92ca-a08bcee91689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356f67b5-75e3-4347-849c-e083f8d46d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de29527a-74e3-488b-9fe7-9fff211cd838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf84c83-d39b-4c4e-afc1-f654753f0643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eeb7b91-4c25-478f-91bc-9c1bb23d7123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed092fd-1b43-4475-98ca-c6e0361d484f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225fca20-e0ee-4bf3-8432-04a5e7920327", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.121.15.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee42e5f-a742-467a-89b9-c57756ca23b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23531ffa-603f-4b96-be1e-fd0bf508e0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524a1b5d-b6b9-4d00-9b1e-de228bb2915c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026989e1-d06b-4290-9f7b-3e6495694985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43a7b91-66ab-47ea-8212-a571e8d2fcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.141.107.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94967ef6-f53c-4f9c-928f-c13a95e8ab71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c208ac41-fd19-42db-af39-1a0a529f08d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba6ba83-df65-4557-8132-5e5dbf9ba21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2fd9bf-cc29-452a-bf92-c0d1a8e9336c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6063b2-02f6-478d-a5e2-ff7df4c4598f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b772e9-a76c-4b7b-9571-ccfe6c74a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19cd590-6585-463a-b5f6-49ba15d33aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9232009f-95a4-4955-8346-4c89d8775c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54e59e2-d884-4f62-98cb-a41a358f3d8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfbf561-8ea3-46bf-a122-bd29930860a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7450ef2e-10f3-474e-9c21-6f1d78b441ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7ec467-3f60-4212-a6c8-c4da4491f475", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9451502a-ba98-4e69-bdc3-91cf8abeb86c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7b3026-819e-4d4e-a8f0-710e1c9eb38b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096b35a0-37bb-478a-928d-7e2d57eb569b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460c77ef-b574-454f-9433-9c9085300022", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77e3799-ce35-41bc-89a8-030024a9cd30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314aa3e6-2b3d-4ca5-b6bd-c434129e5a9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125446d3-e77b-4ffc-ba24-f2e3cae03ffd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40330d77-c765-4114-9b88-d8b3b39f0e50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605c6d26-8221-4774-a059-c9883e7022b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee36e30b-5d87-474d-88fd-420f69911e95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7938d9da-8810-4b85-aab8-dc3221f0945e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4d4a77-f6ce-4b1b-88f5-fe9b9886480d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68ebf1c-eb61-46c0-9377-5480e029ced0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d077b4-fdf5-42e3-9336-cec500b662e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c1c26b-598e-4781-8e75-fe3db7f7f6b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c363c6-8242-4996-891c-7e26a0bed0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebb503f-6df9-41fe-936b-5d7e91287c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4da20a-98c5-4eb7-a41e-7e66d7feea43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b810490c-5ba7-4206-a0d1-445059095966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c822930-3fce-4927-9669-af31a2b78774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7dba2d-90e8-4eac-b49c-a6daf242a2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287b66a0-779b-4930-9166-ccf9477b6243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b003972c-c2fa-4f0d-9501-98999e2b56be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfc50b8-1ca8-4cca-ab12-2d04dd04ce18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa37444c-2ef3-4e23-9f0e-518b494635a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e736bd2-4201-4d2b-ad92-ab37b451e26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d30f11c-221a-429c-a836-8d5dc729f81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea25b485-696c-4be7-a42c-fc32ae556660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa8e51c-9288-4cb4-a92e-e9e4791eb05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af59a5d-36ae-4d96-acd3-7f67ae2d506d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af703bf-c383-41e0-8459-4c53a56514c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e48274-b4d2-40d2-8644-0de0d533d669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1ba0ae-4f7d-4db9-9ff9-cc008d21b586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae5c706-63aa-47c8-bc85-8964ce39c031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54f21d0-a9cf-40b5-ba3a-1642031a01dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0cea13-9ef4-4094-8c80-7d45e8ad34cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202362fe-30be-4c29-990b-df4140a0bd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d43e5c-a305-4a2f-8eae-991de7f20a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd98875a-04ec-4c03-ade2-bdc003ee72aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dc3e34-dd66-4577-8779-292498af411b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2187e418-fb1b-40fc-b7ad-4264cf18e990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2288a4-dd45-4bac-a095-1e09a890991c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9103556-a64c-454c-984d-327a23494a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70704579-5334-4c60-8cb1-5ebf5d585e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46633968-96e9-4228-beb2-73768d7b4b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ea9527-1b87-46ba-ab25-e807d4ce38af", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84eab5c-501f-4bfc-a217-6378c81f5426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.245.182.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7b9a6b-5350-483f-996e-31d0fa6489e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebea273c-624b-43ee-86ba-8daf92414753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a771d16-0e5f-436c-b61a-41a0434dfb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cbbe63-ff33-47a7-96ae-24ed4e8aeded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.97.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2fceec-398c-4a3e-b521-e691b4f807ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.28.37.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a3a121-cf10-4634-a733-85b26d5326d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc11058-845f-40ab-8892-f2d599c5e17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.62.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77e0198-017b-44d3-925c-5d9a8429c2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafdb95e-39d3-4cfe-aa6a-8e25f590dff8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.10.86.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf96502-ec85-464f-b654-106dcdbc1a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.204.20.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fca744-f269-462e-9017-4dad6c8e67d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.108.1.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0fceed-3f3b-465f-ad32-c034b6943bee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.110.238.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4644a9-d3a8-4905-b3e0-3a0502c82427", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338af1cd-59ba-485b-bd42-b38999452101", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.170.65.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b83822-340e-473b-bf17-e3bb3567731e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa085f6-0b51-4cfa-89a8-25bebf2752f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7525156e-4310-4d4e-a91a-b30d80772354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.40.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1eae9c6-0483-4d21-b176-7f62beaddff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.68.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57823ec3-2d06-467b-835f-982e7762d529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfd823e-4a88-4d72-b196-d9225c8580a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e68a606-25cd-4eda-b754-2fc6fc5de9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0588aba9-827a-49d6-b595-fbae1f6f428e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0311e18-4443-4548-ae09-d87245391e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd58ec6a-e2f2-4ba9-a784-ea283c16f5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538caf70-83f2-403c-a4a9-fba0e1d947d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcef003-34ac-4698-9fbd-13cd0b2f118d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ba7a50-7bee-4f08-8052-049278c7cf04", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.15.10.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e139546d-3b4a-4d8f-a4eb-f32800995a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.173.2.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3240b074-c411-4918-b66b-00a66278bf37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967ea104-2a52-42dc-82eb-bbc91ccf1b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.128.241.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba3f23c-669c-4b54-a798-2df8755fc936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.64.151.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38038f54-b17e-442b-9146-66a6efb78e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.98.151.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b6a790-0a8a-4273-ba33-f6c82a481325", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.140.185.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a2a483-b4b1-4474-97ad-897c53a52439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751cf389-0c13-4c99-b1dd-66ab120ab04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe343ae-985e-43a7-b496-3208b25a71c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fa92c8-ff79-4410-b497-c0b19c39613b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc26865f-f102-4bcd-8f9a-51e9f20777e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b73820c-69b7-4b13-96c4-fd4cd3c8b1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.162.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85f08c6-92ed-4036-b96a-4bc7764680d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb46550-d77e-4175-8a92-b41718df19fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fe9898-eb7d-4313-8d94-42343ac06f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9b2611-0d96-4281-86ef-b0d6267f44fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42c2165-64c7-4037-a0ac-c6ca5a18a187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6e0cf4-4595-4d4c-99c9-e33b3bfd7e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830e116d-9c8c-465e-814f-d8895973fff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61062fc4-b45e-4c6d-97b9-7a56c564dd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5b7aee-d2e5-4d18-8a1c-6107f6407f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2069d505-2b03-40a1-bd65-40968c710c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c31874-320f-427d-9037-a6fa55732919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.16.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79017702-c89b-472f-a0ca-121b4cd31d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867d2812-094e-4c7b-a0d6-136a5a81bc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdbf14c-efc0-468f-9a98-c12e03fa7adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d77c04-c1c7-410a-a3f3-71c310c6aad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217972e4-dfcd-46ce-9bd9-d12d0266cd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a43bc4-ceb0-450a-96e3-730eab2f49b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6ea5ee-01e6-43f4-9ca2-b6a3e836dc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b865652e-c83c-4fd5-b93c-6b29d1552c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64eb77c6-b0f8-4813-b8eb-3a2138208743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8996f75b-8e35-4a94-9d5d-ba378a679227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af64684-a4fb-45fe-b455-8596d1cdab9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdcd670-d84e-4f22-b442-f06d6ad06f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6301dd4-3b32-454d-813e-54b964f3f0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f02d8fa-49b5-4df2-ba7c-532e79f9ff5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14b359f-cae9-4a3a-8655-73d188b38a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39eb194f-7491-4144-8eab-d5f7d1d7474c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abbb5bd-e16d-4087-80a2-efea97d9ca75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3552fe-7e24-4f00-acd7-5e5ea6158890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bf56ac-b6b1-4f89-8ce3-aaec6f06c3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c1fa48-5a31-470d-b3e4-7299312fbfbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a2fbcd-ef1a-4529-bc72-692e92fb3f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a71634-b00b-4cfc-ab1f-bef584fd1cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3469ac-eb33-46ff-91ab-dfd9f5bb4769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c28c03-403c-445d-b5bf-36430635471e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6645a3-934c-412a-b9cf-452c3c04c6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c481fcec-08c0-4d9d-adc1-c0517e2c06c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e196df-bf88-4b49-9b06-02ce4a444eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73849a04-538b-45f9-a3e3-a3cb6543eb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600162e4-aa5c-4654-897f-729b23c5e0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b03496-317e-467d-a920-d02f178d88cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02082192-8f6c-4852-8001-e149f9422a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5f516a-9ef5-4693-9d78-015edf6da676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf99226-232b-4a2b-ab1f-3f68cd9f31ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e8361a-086a-451c-a5ca-957df60f284e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c93ee32-cd16-4342-a07f-70146d41dd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f7f8b1-e941-4b12-b678-255a4126afa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049c6109-1216-458e-8576-b2a82d00bee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3522062d-9e60-4ed2-80ff-af5dc1c7fdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1715a18-2c9d-4051-a056-5df8e9396115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8ac69d-8308-461b-8853-52176469efa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675d2246-0d5c-45e4-b1df-98139b61653b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdc6270-99e7-42d9-9262-cc2984605168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b30abeb-c06a-4680-8276-2cd9a08c368f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b1049c-a44d-4fcb-8b2a-f16716e9d7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53d9340-8fc4-4ce0-beb2-62c7321c281d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e57fcd-665f-44ba-9ad1-05e3e3d75df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7164fc09-2439-49b5-912e-3e1077a227b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c30cb0a-78ab-4aeb-a2ac-1ea8e5877d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccee202-aa34-4ba0-b553-0d4b70a867dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c25036c-4e1c-474a-8e68-f617f02df1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671b989c-f952-4ccd-886e-67ee2e38aa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af79db72-f0fc-43fc-a11a-a33806dc677a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad6cd3e-ae4c-4895-99cf-a8774186e9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d795a7-7a54-47fd-8ecf-c318befdc157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986462de-0c7d-4ffc-9356-a4f005c36221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9ecc85-2318-46be-830d-b39c623aaa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfda0c99-1afe-45d0-8dbd-b425ed6f3660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce097b9c-2873-4998-8b7b-a491732ed893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfa949e-80f6-4d5b-8ee7-f9e17882b267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4ac622-3533-443a-8ee2-0201f462c2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d154df53-7410-4f9a-8df2-5238a5b3e866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd37fa1-ada0-41a7-816b-22f32070d174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612a6381-f142-4606-ae1c-b7b304856ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608d8975-6e21-4de8-a8d4-a2dfc51f3bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b49d48-11a9-49b4-9bce-f00cb291cfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aeeffac-ec33-41ce-92fc-5508bad58e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.70.122.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae18edd-428f-43b0-9e33-cd021c25d4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5526f6-cdf2-4b21-9d72-42aa757c5763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c49ea5-6b5c-475a-9423-21f2990d8626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e375cabb-5418-46b6-9622-866f052b298f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86edab55-6b00-4837-b6a5-7b9f7faf7ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.182.161.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd1520c-6bbf-419a-b1cd-255ccb0d4f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a239fc5-9bab-4cd5-870a-455588175835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1c3771-7c5b-469a-87b4-bb46c5a0bb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a9c70f-1ab7-4285-8820-906527053ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6974ec3d-a09e-4bda-ba7e-e9f446e9706e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31301e6-cc4d-45f9-a071-18432ece4787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70ebdec-0b19-4bee-a762-7f7331e303b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.65.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681a45ed-8ff2-45ac-aa95-6dfc1168f868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48ab777-2956-406b-971b-f9d0e172c148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0430c4aa-7237-4d7a-9e45-fa1e27a692ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4de969-cbe9-4f64-afc4-222a9c48d9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7987da81-2d28-4285-b934-d30e52aa1ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b5d8fa-93fa-4c69-87ca-16c7c1ce1ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746b9e37-eba5-48f2-8c1b-7444ac3b4d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bba632e-084e-4832-aa10-494dd3d90a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1703e3df-8186-4be3-9031-eee78148f35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b4bbda-f8f2-45d1-b115-97c8a05371e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6890e6fb-2494-4b60-9189-546011ed1e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e707ee-82d2-4a24-bb1b-1e359940cc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab9f56d-56a3-41e5-b1e5-c9b11ce0de6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.103.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fb519c-5c45-4c91-ab0b-909a6949099a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274ea4fd-ee16-4376-8ec4-17d6b4a0528c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca6dd9d-5c23-4741-ac8f-b2142b07c729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0637cc-cde7-406c-be18-f88557bfa0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4284a03e-126b-49c7-b3d1-5a0cbac90221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c5e8db-cf21-4ac6-8799-72e44e59a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4360d64d-bac9-47b2-ba52-cb7ee1340e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6c1fae-03b6-47c4-b2d0-06c087a4284b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346a9894-d722-4c76-a88b-bbc250de8643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c65bc1-26a8-4c6d-bbc0-11bb43c39536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f152f3-1d08-4a4e-9f2f-4c2558ca98f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5a1b7b-9fa0-4192-9fde-0b2d5492e43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2001af1d-0e2b-40b6-b669-503729d96178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0cdff8-932f-440b-9753-1ee462dc8fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ba1a2-7b94-48c5-809c-222b98edfc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3221e5-cd2d-4722-ba11-9060d945ba17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12040481-fc99-4f7d-861e-8b3e8b9b013b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc4203b-f058-4289-9684-791ea698ee9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9473c1b7-2246-4b01-a776-4558a5b0410e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45083a1-4d2d-4ea3-92e2-949570fea1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2774d37-7cce-4d31-a0f4-000c3fee48ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f294077-aea0-462a-85c0-0a3cc31571f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f0602d-8d80-4911-bed2-c60da9a85358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081ecdc6-294f-4f72-b367-73336353d316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62311767-5667-44ff-9ac4-80898a3627c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bccaa4-4858-4bd0-adbc-13a3fa6178ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6147b5b8-678a-42d0-87a4-0cc702f0495a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4451b-80c0-4d6c-b572-333dfa1be2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d550d47b-8688-473a-b42e-e82bdca8ac28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8e1d3a-df6e-4b49-a88b-fcbb62492d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe08e1ed-f1c9-45eb-9f92-408cffc828a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bec77fe-5b20-4869-9bc3-215f86567813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314fdca2-295d-4a1c-a56e-e960247491df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edbd90b-38b3-4422-b17e-4677b66467ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70394471-8074-4ea3-85fe-8b1397028bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5013b11-3d4f-4c19-96a3-d9c91d487f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6264d4b4-cec2-4567-bf16-ee36532a5450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053c7689-4062-4323-9486-d9a3e579b7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6686bcdf-ee5d-4985-b084-16c6884255c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be4a2cf-62a9-4430-8947-1cf6559d6391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b42104-31d4-4e79-a4a2-92191e37e0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5b66ce-9567-4434-8a9b-e94d6b1a902a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c62eb39-4765-416f-b566-0c54e42db5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ab8b9b-531c-45ae-938b-cc7d1201d0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2fa4d6-6505-488e-b831-156b280bf264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf2b5a6-12f9-424b-8d5e-a600c7f77144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68827e66-a0d3-479d-af0e-00206f0ef45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba45076-5ab3-4c40-87a7-f8fdfcca5bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddffef94-e65b-458e-9955-5f6a1c2a48f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f865bb3-62ed-4610-8cb6-29cb51441836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62aec344-565f-4c3f-b9ac-0f45c94530ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88e358b-e343-43e2-a9fd-dc614cc7f1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8298fd80-9a31-44ed-b06f-0264741c268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd59865-2db9-4780-9cde-efee6737c0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eaca994-a1d7-4fec-b400-daaa61473807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79c667a-e928-4efa-9cdb-8597d27c41f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f659ea-2f7e-4604-bddd-4caaa65c9413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33438cc-56f5-4ca8-8f35-cabc72b57d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31abb92e-8ef9-4ea8-882e-8737837281d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500499bf-0c48-484c-8fbf-c5a16e608796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7763537f-8664-4612-9d13-21f7c3a257bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6489d2c-2c95-485d-85de-5ce2b9fe15f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570fa892-f9cc-4b30-acbe-f7d8cf22ac53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af584393-e588-4e47-831a-776674e37565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8ceba0-cb54-41c1-88d2-76e0bb0aab15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25523ddc-9020-4ae6-9248-e8e1f57b04ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd02e83e-c90f-4d38-b15e-7452515a08da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644e045b-e732-4cc7-9ab6-9188f14d1fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5828e966-9f8d-43d7-8071-3a83026865d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65d5708-8edc-4e90-a41e-799bac259e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee1d3d7-43cd-484a-9556-361fc006098c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c51759c-d025-4aa9-876e-5e4f15a30e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96533911-3465-4e0c-807f-4aed7df46744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3979f4f4-f8ad-49fa-b74c-95a43bc44571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68329d11-edc2-4634-b471-4f69e5735430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93af89ad-1546-4da2-8087-87ead5156878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c22a71-152e-462b-86ee-5b8399adca4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de289c47-eb1a-4dee-82c8-f4a2fd0568e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1304f9c6-ac25-4bd1-9182-6170dbb0f475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd019c5-6e54-4ce1-915e-e5ce5a655c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a575f7dc-91bb-47d5-901d-9305a250d8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70085e37-6202-4756-a8af-b79ada99b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b914947f-5851-4b63-a452-23d9c28d558b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86acb723-e5a2-455a-80bf-fe07e55dfa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6731618f-3f10-4e99-8ebd-9186a8961932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c07ae89-657a-484a-862d-2c7aaa3bb6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b80c33-115e-48a6-ad51-28627678a58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6540c0b1-0cdd-44fe-a2c0-83a5eb3664b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747644e4-329f-4c1e-83f6-fe8b44803918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea745ab-a13e-4b34-886f-1b6f354c5998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48336140-fc63-4a95-8265-47d73051ab9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d37925b-39c0-43ea-91d3-b3e1e578b685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d5c9c2-524f-4b6a-b133-fb1b6ce4777e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac9682a-723a-46bc-8645-002e302466a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dc9187-946a-4f6a-96ad-035f9c9c3be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07ea432-6ddd-4519-bd0a-6acc9cc52939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707bbbf9-b831-4929-a34e-f1d2539785b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.252.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260f16cd-b9b1-4d92-8448-5948defce1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.37.190.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66312214-b6eb-4aa5-993d-9df4ffafe2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b182ce2e-44f7-459f-b80e-9bb46ad95b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.203.180.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16d7fbe-8985-469b-bab8-0bc11d2bca69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.251.121.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceba9ccd-1a7c-45d1-81f3-82138b49dbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.64.215.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd761e83-36a5-4a70-b398-8746de8084e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.52.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b858c2d-dcbc-42d0-9864-108d50503826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c1a079-75c0-4820-96e0-edc34e2905dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.181.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921e9e26-22cc-434b-8725-7667925714fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e24b96-b178-4180-b115-2d1388ad4258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.69.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3848801c-4ae8-43b3-8150-697abc98841e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.249.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99404aa9-3b8a-46d3-a942-41a042a7e002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dce3230-2fff-4b44-b013-7ac0e0920415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd42e83-8f8c-4b55-9340-5ef24fe06033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1198f21a-89f5-4024-af5e-4f314acd1c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1decdb4-7657-4903-b8f4-0ddec429b623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bea1ea7-8923-4b63-a1f6-dbef342bda4b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec98451-04dc-49a4-8c61-71e922709d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76a6846-3dd2-426a-97da-3936b41e56ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f68677-42dd-460f-b869-7a7e770f9804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295ba64e-cda2-491d-80e5-62a34941e653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78896d34-a228-4eb5-8630-b55fcaa2b336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c410c00-eba4-4827-bc51-354590493805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f34ba02-1849-4198-ae14-b8f1fa093cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad277ae3-3eb3-4e3b-8d06-bf6e34194a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83130e2b-a4fe-4a3f-a3af-9d6d0395da8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd70d80-a269-437e-ab04-ede71434f224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f3575f-9ba0-4708-a218-29b00de14b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746185fc-633f-4d3f-9e05-a4681d3e7d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecaa8cb-f548-4461-a000-9544b74d69be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbba401-1dd3-4b3f-b905-76e7f185ecf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e774a5-d367-4c2c-9b25-b8de20039707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2dae9c-88c9-4b49-b19e-84df1c5d6563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a15ef22-54bb-4ae2-b518-a32f83a6068f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a692d0-fe2d-4fd4-8cc5-7f5254c7182a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0491d254-379b-45e4-bf2f-ecdf8f50e68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b793640-11d1-4d06-acef-9d126bf2e1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebec5272-995d-468e-a5a7-b92a4c5addcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf074fa9-4c64-4df0-838d-23ad60ddec3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decb17ea-bb0d-4bed-9625-d6990d8a204f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb73d0a-b123-46d1-8646-f987dfac4768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e12d652-ff2a-402f-8216-626a6b00b478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e3a105-2a3e-4b18-bdf9-e36acc4fdd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b139620-daf3-4632-8ab6-6584d0c64c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab508e0b-3cbf-4f16-8b7d-6dc7ec660b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5ef76a-c4fa-4db3-9332-560adea0ec58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7910d8f6-22c4-4db4-9ea9-bac52f2e40c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3928822-d7fa-4eec-972d-5385b9aee8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5e5a8a-398b-4fb6-81cb-942a158ad6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988e27f8-47c9-4e09-9673-ee726f41f3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0da20b6-524f-4b92-9d50-a8747fa2233c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a803686-d4f0-4137-9800-30e6d1d336c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f28f4b-1832-4b9d-a067-4a6ae3b30f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84edeb09-b30e-44a6-8e17-850fc029c7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c90044-1c10-49d4-a9d5-549ba0819c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee3d8ba-0a0f-43a3-8459-58316f47462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf3cba1-f555-4fbc-ac48-5c4155640348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81850864-4b3d-403e-81ba-6e4994d7261b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01e0fe9-ea00-4467-868e-734dce7c9e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16596552-1d9b-4364-a75d-6f1b00f62c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6715e82-93f0-452f-9131-3aa1f2588d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51ab60a-56b6-458d-a73f-ef75662541e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be247966-804f-44ad-9508-28b1dfa387b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c06188-4a4b-496d-9966-705e6a2b3e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3774a292-932c-4e98-8973-7ae0febc52d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6de4c8-50e9-4418-a9bd-8c61b79aea24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e236e66-02af-46a4-ba11-5771bcc367ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bde7f90-548d-48ca-842f-0ee1b02c29e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce78de27-9c15-4b53-bf03-8b785d062dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904385ef-b9d2-4c3d-a4ea-29a3e0965519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36011f9b-889f-4f26-9265-2471df0781e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2293a566-6398-48cc-87fb-926f829a6e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352645f0-2516-48f0-bae6-f99705eefe72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb81f67-8da7-4b70-91a7-0c6dd2061ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feab3460-2da6-4770-a37e-d68b64d654c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a4fc49-cc13-4536-94b4-2efb8d545ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69224241-a553-46fd-8456-7ceed50a89c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516dc80d-d4f8-4e7f-ad91-f778832b739a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e110f85-caeb-496f-9ead-38413451140f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2086bf4-ecef-4673-b549-678881c68a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5161e874-94ac-475f-acc0-f0edda9b5fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa7370b-5452-4812-a54d-fe05038c2ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35882dec-5838-4d0e-b100-e31bb788ec5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1bb8ff-b36c-45d6-bd3a-80185d3b9fd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.242.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09de0779-3d87-4b79-ba90-969c6629df19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b100233-5e4c-41f0-9f6f-542c1d104ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561ee3ea-e476-4c4a-941f-231005701e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60641c2-d990-4069-b657-fabcc81bc13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.53.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8d89eb-42bb-4621-b4ac-8c2d305b51d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e7bfde-5a2f-4fec-add0-e66d67ca6dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.50.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5858d80-afb0-43ab-8a95-12db3f15cd3f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.62.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf3b56d-2d3a-4b9d-ae61-584e18d79150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd45c79-5b65-4b51-91da-d8d1c4437e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.248.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893f0139-558a-4110-8b1e-67af9a68e967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bee417-0bfd-497c-a34f-4b33ed6d0351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96667c4-8ef2-4913-9367-6867f25a4e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec23bd6c-e988-467f-b4a5-bf0e0c78ac3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b46cf3-b51e-4372-861f-9024a1a560ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cd16af-a4da-4d87-841a-b93043c25eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b705817-709c-47cb-9287-edabf6e5ccd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0ffb18-21f7-4c33-82c4-35e053b6b12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa8fd8a-aec1-4acc-b911-ccf901e0a18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6508e31-0323-4e63-ab10-17c802e61f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d696eca4-056f-45b4-9233-9a05d3b3c684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272e2eb5-ed8f-4240-9d8a-8978a9bb5ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8870f0eb-94cb-4fdc-86bb-7681c36064b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9df5336-51f6-4219-a972-24cf30d44883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77db93d-db4a-4058-afe8-6f6fbdea7011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7da89a3-ed6d-4ad2-a8d4-d5dff9fbcb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e45e3d3-760d-47fd-b631-f4decee4dcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bd29ec-16ef-41a1-bf57-43a838c9b66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c66d5dd-4f1d-4ac2-ac32-9383ae954200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c251bfc4-77a8-445b-a05e-87e4b5b9c6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c180be-0d64-4967-84d5-a52739f15f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05758b7-24d6-493d-809c-c53b5f105579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bb6f54-92c9-486c-88f4-44be19917d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b602d21d-b84d-4996-8229-845493ea7c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.56.245.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6942fe3c-62af-4ebd-bb7d-e0db3531f6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23420da3-730b-4ee0-b4c2-ec66eb899198", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16cb0b2-c174-4d4f-80f4-019f872134ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c745fd-dd3c-428f-90af-7cd5d5268a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd99334d-4202-425c-877a-a42351df1881", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.100.171.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fce1c68-2ff4-422e-b2a5-14af9d1ec24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472e0fdf-2cb6-4f03-9269-7b7c6da49c2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.104.50.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036bf97a-ccac-479e-8fb0-a2140f79218f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2861b27-231f-486d-aec0-5770aac75ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b482ad-0ecc-4c15-a405-e4562ee35852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bfb45d-1aab-4960-9828-605d30b1f021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e79409c-e54f-4a39-99c6-16fa516de63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5d963-0139-44f5-a146-e8e5ec0928b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0023378-4d37-4df1-9a6c-41924962198e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01445c88-ebe0-457c-9769-692c69526385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62231650-8585-445f-a605-713813db7f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57e491a-1d16-4076-8c50-f94ef28f1e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.173.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819510fc-0119-49da-8afc-f8a0db15ab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738a7c9e-57ed-4504-a29f-70d9a524fc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.81.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de063d0-5d9c-404a-b8df-a9b3fdf20a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0376773a-5f75-43d6-a04e-05b908ded68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23c490b-60a5-44c8-aa4d-68152a79d0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4123a513-e730-4ea4-9d56-92d69b4af09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddbdd05-3dc4-4952-91a7-cbb9129107e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6310cd66-b33d-42b1-a80c-b53e35b9966f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a29cc4-1d3d-43c5-889e-67e60d960f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab606652-df66-40ed-8870-f4a3b5bdc296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87689f51-3518-43a5-af04-1e7fbddc0077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9806a79d-155f-4362-a9fc-0b565c69fdf6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.225.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bb8bb0-7b79-4661-a13e-bcfaa2337002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e255592c-7a42-4688-83b1-016a823e1d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33958adb-80dc-4770-990c-15c86b70e2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a74045-d7b7-4ada-83f5-75faf3e7d5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150ade14-8605-4e94-8ef5-d85f78ef51f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b965bd3-65af-4a66-b5d2-4309ea6527a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56a59c4-3d66-4d5e-b419-c3e64c6a06e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cda69a0-10ec-4268-9663-566bd440f2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82db83c-8267-4dc9-8a6d-341cd6d79862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa61b88-a4f0-4cd5-8354-3820f0f5d6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d488126-9445-4817-9355-424ceca93578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a70ffdd-9875-4967-b2e3-3ae88c768cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc634732-046e-4c0f-8847-77b7b2d51793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119f7b1c-0461-43d2-acf6-87556d800231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.76.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09431a1f-a6ca-4379-a7ae-a81a26f39918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f7ce04-fd5a-4d6b-8d1a-b1fcb9b13b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298ac6c2-430f-4a3c-b4f6-34fe9cefb0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e88dc52-3043-413b-9158-614b85ad5661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73349a3-347e-44b8-94c8-867cd2e7b85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4679652f-03ec-495f-a027-f5e88142b4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74551fa2-945b-43b3-85d0-824f52b71bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34bf972-3030-4894-b228-0b12444a4f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb48367-0a5f-441d-829c-6fb4f6fa834e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c641f135-38e8-4620-bdae-b2018468bf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873ff3d9-bb02-49a8-adc9-aba5e81797d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3162d15-2d07-4c91-b16d-cde3638457aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff597e6-ff57-430f-a949-5e48cf838ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.0']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb3b642-0269-46e2-8ee7-4970a82e7eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53a3864-74e3-485d-8c50-31999fbde510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cb3c09-52f0-437d-a9e3-fd9096c66898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ee686e-bc17-4dc8-8503-6c1c371cd61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3878a738-508c-420f-9cf1-8fcf2c7a6ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8b076e-154a-4956-ba96-76584230d489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26be4443-e654-45a5-ba48-33fc673e4eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78aa45e5-8b05-43ae-9fa9-de44cc50ff80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa02d695-da64-49e0-aa5b-4eecff7485db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eb8a25-bb55-433d-9d55-cb5a5340db58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cc54c7-e903-401a-9653-7b418ade2867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5564e3c-ca0d-4c13-a365-b94a11305bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92075380-7672-406b-9a86-dec661a0e945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1f4ce-84f3-4f02-a7a5-b7494608be48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff0140b-927a-4dc8-a481-ed2338e4518d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04291dfe-f337-4f13-a87c-c4485304d243", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.240.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2844d0-2037-4821-8294-8ee756681955", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.191.45.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f710fc39-fe5a-41ef-817a-ee6411f21499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ce2805-8409-4060-8c4c-4f5065bd7f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.12.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d91bc8-d769-4bd0-8d03-4fd4a7fab78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.215.212.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057ac73d-cc6b-4664-afc8-30ef908051e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a34760-5f10-45fa-849d-63d7d444c46c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.36.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2a4c51-ec98-4d27-a890-01cc365faf94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.82.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7704c4a4-2de5-4526-bd9f-e0c6d26c19c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e92300a-c814-4ed2-bae7-40825a5c8952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ba585b-6caa-4d93-82b8-764951afcfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.209.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f85681e-9d77-401d-a929-3f7e74ed80d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4e9e03-70c9-4e1f-84a8-0af88239486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908a8d51-719d-4d46-a7ff-2394ae02676e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df522ff4-5fa8-49b0-a5ac-fdf661892287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9af00b-2b00-4e61-a964-cb435d7fb3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.244.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349fd3a3-2585-4f59-b9f8-c867bcc1cfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.99.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aca44b9-1d0e-442f-b625-44f8c3fe2943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85710a8-595a-47c3-8f57-c80e6546f868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ab887e-d1ed-401e-a4d5-a31f9b26ee01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d6e34e-44dc-4dee-905b-4a6c7dd7cad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9856bfa-0c7c-495b-a920-c6609792cb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff6bd3b-0666-49f9-a2ba-00917356df11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c297df-5dde-4fc3-af09-3336df5af118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29d65c8-00f2-4c73-b680-d8f0615e065a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8724489f-a9e3-4c97-8588-18c395f823f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d70971-e261-4883-9be2-c38490b561d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.153.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a13e29-0014-4458-a52e-fcaf6b22c912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc33000-20d6-4187-aa2c-943ba5486b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249cb382-a5b2-4c22-bce3-1d2b1b3269ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ef5565-bf33-4c10-8f66-ac0d18fb0813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55960eb0-d65e-4caf-ba0b-15d7e8d350e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3c491d-0e6c-4b0f-af3f-0fe05ba717c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac18f37d-d478-4b77-8203-2bcb3b1985de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb204db9-07a0-4f52-9aba-7a2a912b601a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee02328-6816-4784-a542-4b319c3dd701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219db08c-9bf9-4205-8726-8dd171c87422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d25903-4ebd-44c0-b26a-32eb97244c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a223477-6f46-4229-88bb-10c644f9da32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be159d19-bc66-4ea1-8502-cb950244ce83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e82b80-597c-4d6f-b794-bcea58911464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a139b124-500c-4e31-a83f-bb352ff4f9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd99ad3-e075-43bc-b067-13f4afb34a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80f3b6-6bab-4850-a0d6-8e8d02b6e1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827649dd-718e-47b0-a278-f63f6c337e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6471a195-9990-41cc-84b3-f064b1e428a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d2e724-272c-42eb-a18c-93a0df7ee92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77028ee-d98d-47ed-bd12-0e0df045bea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aba4853-226a-4afe-a18c-9bfb6daeb375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf571d21-8d03-429d-aa69-17e064cfe075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b915bbc-9799-4058-82b2-82cf097aca5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f35dd9-ccab-4ef8-85ed-f7177ad209b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d0fdd4-ea62-43de-a2d4-680ca7fe1fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b48bfe-cd2e-4b9a-b34a-5fa733137a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2899805a-b31c-496c-bb7e-c2b4a3075ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a384c3b0-fe4c-47b0-a142-6a7630b92bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78112fda-61f7-4659-985f-aad4dbca1bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e5ba84-6f16-4014-8726-e38fe1ffc8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04208078-2265-420c-9ac3-f07a1faae9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba459b8-2f32-452c-93cd-673fe97f8f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5545cf7-12d8-4daa-b970-e12a34f2c11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2b748a-a0f4-4b21-866b-51ae29a988b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25371893-887c-4035-b29f-e6be35d9746a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebacbb56-99af-451b-b3d9-4a665d987c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.60.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc2934e-dafc-404b-a584-c38b5fac135b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.140.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1373294-68d1-4bf0-8d86-a5ae83b038c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388c8895-686a-4fe2-a513-12c38fbcd3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a098b9df-fed3-4aa0-9f1f-7c246faa85fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.209.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb38bc24-bfe9-4d1a-9b80-76f35c4d377b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617d4f4b-9f4e-4e7d-9a7b-866857fe54da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.186.40.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bad390-a8f0-4083-879d-7a7149f224ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.224.192.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2c9f31-b243-437c-9c30-2e7c126035b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.226.200.0']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01b1b4c-0f7c-44dc-92b8-1a2a71e5e23e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.63.223.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450a6f76-3dd2-4522-be03-93b6c3f93849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd47b9c-5895-4610-ae70-4718c019d66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.50.55.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba62bd6-0df2-457f-9b18-1d1094b06467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd53485-ddc5-4d6a-a62d-4b2750c9cdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3628d3-fee8-44c6-bbfb-09c2415aa6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608e5d89-2261-4ceb-830b-21d9f84f02c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9311355d-f6ab-4803-bbc4-bde1f9999f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb8a9b4-8ef6-4a8b-b582-1a53a17ae680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5755fd6c-33b1-4b97-a47b-52ea12e7e278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afa5e08-72b3-4a89-a67d-c485b0fb5d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98c7c37-aec9-47fc-86e1-7b61c7c9021c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5296aed4-612c-4444-9c0e-cc890676263f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92a68d0-797a-4135-946f-e8946195439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1200171a-8ce6-465e-b37c-9bf5e1d43c76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.169.39.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca4d28b-1209-4cbb-acda-e3ee783c1409", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.169.39.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7427f11-7472-4612-afdd-3538734fb8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be56fff-4a5c-48b5-99c4-9ba77dcea1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fc2f72-72f4-435b-89e9-3d847bdad4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ecf60e-b645-4455-91a2-15bfd520c8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569e5ea9-d1d4-4900-9c70-d673a75619f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f160d729-6873-4330-b167-11756f410ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a033a460-26e1-455e-a499-27ffd38bd82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b9ebf5-2698-4dbe-88b7-50a3ff19622b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fa980c-188c-44a5-8e27-b3bab0aa6d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68216966-15af-499d-82f0-40f7484c7f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b2bda5-f754-4673-8127-8a6d91a3d525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5114b62-57b1-44e7-913d-7236c69e75d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399397a4-f5e5-4dcc-9e0c-432a55626cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78106875-062a-405c-bffc-8aff211a9009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575ca14b-a54f-41bd-9510-2bf269374764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a979c577-2fe4-4000-924c-6eefe3951ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ef9130-d25b-416a-b9ce-66d44ce15d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e352f88-fdd1-4c91-a494-c01738204b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221f8723-1bb4-42ac-ac8f-0309db01800b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c59f24-4d00-4da2-8dd0-46238a3b10a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a912fb-e5bb-4079-b73f-390bdc5f5c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c74bc0-e26a-46f7-b79c-cea11c215065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476bdc04-a835-4e2b-ba3d-51e8d463eff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ae2295-d275-42a4-8b9f-6914b0f7bc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd245c7b-3bfb-4f44-af25-6e3c27dadc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0b9790-78ef-4e32-b698-7b1d4824f6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09330aa9-d2fc-45da-9579-e84dd524b02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6172f5d0-b4c6-4365-a471-9d8df3b9203a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4bcd77-59de-4acc-94d8-713edae93509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382ce2d7-131c-4363-80b3-bbbe0eeb54fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5e0682-d7c0-43fd-bee3-262e207e32a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23644b8b-698b-4151-88fe-19fa2a569d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dafe349-3569-44e5-af7a-a9bac1c21b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2213d9c2-5391-4f46-a4d8-2421394049ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e45f53a-6c70-4ef6-bcb3-cc57199aa629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fef6b6-698a-4551-9f62-d43c7e087baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38927ac8-230c-42cf-88f4-0ebf80732a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b3d220-d959-4263-b577-217ca125358b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3799e1-2edc-4dd1-bce9-a8cafd94707a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2806d8c-1321-43f0-93ac-ee06c8bcb08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24bf12e-e2f3-4d5b-98e5-37e580fa21f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965c3beb-ce0b-4539-8d1d-3ed07ff42349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20629868-2422-42d3-b26e-7ab8ef914f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ba3165-eb20-4ce5-b528-0142205849af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958cfc15-8812-4e57-8d41-e897b64d6fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b619d964-3821-4e9b-b292-c3f61d1c0e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29a5bd6-8a0d-4c4e-8308-297a550ddc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d40134c-bbeb-430c-9099-ba439001ec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e474eed-6036-4d33-b602-26c38cb147f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be761bd-cc04-4188-a7ce-1079fae46f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9086bab-1b6e-4f9e-9beb-4b0be8a5f9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99afa86c-4418-4dfd-85fd-93754094e94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9727020c-98b3-448f-bacf-aaddc07ef501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011e11ea-c27b-4deb-8b18-d82c6f914641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ff5aa4-0d37-4a2c-91d3-8bd595fed8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.151.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cb63ef-160c-4c18-b13a-31889403f828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.162.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de008492-0a4d-4e9f-94bc-0ed0aa13c52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.218.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736466fb-026d-4e46-a8c9-6787e4f94876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f31a9d6-74fc-41b8-9797-f3b1be26b737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.236.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e40f36-7fca-41ba-b325-6ca24cfd2a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.42.55.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90265749-7f6d-48de-9f07-d5e2ff8c15ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.208.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b409c4fd-f569-4b39-a52f-6af2a6392d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.234.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40a087d-89c6-4fb3-8609-8ddeda974e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.11.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6984706-aba0-4a02-8789-7f69fe9f03a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.61.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e336420-7446-4053-8b1c-1711181b69de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.29.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17467f4-4c4f-41c3-9ec9-3d03b1e16522", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196e0a0c-857e-4cd9-9337-5d2e3f832e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ae7d0d-ba17-43b8-95bd-f98fa8634d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6304d8-9d8c-4a55-960e-6416cc567c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfdc088-294a-43c8-bda3-93071c86f3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4163ba1-b6b6-4384-9862-633e98a5675b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.214.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad356567-d362-41fd-ad01-3f6d21295254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.4.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a864896-f244-434e-a718-c8497c921c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa473032-a1de-45eb-a6d3-c8779dea08ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.47.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122dc76a-0b64-4a1e-b05f-b896a64c1d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.145.54.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d3646a-d4e9-4676-adb8-2b81db6d5e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d34d2a-9f39-4b63-a2c6-7845c93cc616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1598c34a-1b3f-42ab-8ba8-c185d5174051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.147.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d066e7-6a6d-4e50-a8dc-12c95198ecc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.65.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e1adca-e1d2-4b8c-b666-a1843a36d979", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.87.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bcc7e1-7f99-4563-8102-8c628e6c8a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9009a413-44f0-41e6-864f-136bf5d1edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066fc91b-7fd1-4f5a-a994-9be775680172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9d8510-194e-4f93-bdb4-2d3a569b4235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd7b81f-4ea7-4a70-96c5-575621d76d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a82bd8-9ae8-43f3-a448-ee9cdedd66f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23188dee-28e5-4d81-8758-4c6af210a01b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea5a119-bd66-4b83-9ee6-712b454617c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ec078d-fc6b-450f-a488-4393f78daaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.217.42.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fbb69b-cd78-4d00-9276-6dc148ec25aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.149.131.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbaeb60-5f00-4e37-bd65-4fb63ca4cb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9afd804-c15b-4b98-836b-9d539330261a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.245.36.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d34dfc-7179-4aad-94bc-d6bc04ac4bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d1abc1-e0d4-43c9-8347-f084f8302004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.112.19.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49da857-75cb-444d-98a2-448c9bdf6b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.209.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c2acec-179b-4d29-a425-750ac0cc9855", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.41.8.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08dd607-b5ad-474f-bec2-d80680f4898f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.49.94.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0553d49-3204-4ede-9f56-ac612b556106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73e2465-0c58-4be6-9e35-fb8dc4f1f382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed8e6c7-f0de-4163-88a5-c097c3995002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b28aeea-20ee-4b8e-b338-e90421b95a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85737c4-e35b-4d2a-8658-8738cc2b7fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956b256c-83fe-4c52-baf5-d8d48a7a8282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b874fe7f-fd6b-47a1-9abd-7882f19f54bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02fc50b-2584-4bd3-be3f-7c32cc653e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb820119-0015-42a6-aadb-23e1157243c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7107d7a-d92a-4ca8-953e-cc57db54f8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefc61de-d81f-4a65-b232-a9715df6c937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5faa18e9-e2cc-48ad-b8d5-64efefd057c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a78eb1a-ee0b-48b1-bcc8-71b66c784314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.42.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfba438-9412-49db-a6a9-3af1757100f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.51.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c8e890-d818-4902-920d-f2c7b7c254c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851bce9a-2e0d-46cc-91fa-f616a86cf030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a36982-770a-47ae-b16f-608a3ee73087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19e341b-dbe9-469b-bf73-5caf40990bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.225.11.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a94f43-032e-463c-9067-386209fef9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4985d6-21c3-49b5-b026-129fefe86c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df811f16-91b4-44dd-a9b5-a8fd9361d890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064179dd-f7e5-4ed3-829c-aee8e279f62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4516d48a-4a8c-4019-9795-0414318720b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb12ef1-6890-4d22-aaa8-310f3c00a27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c478461-9363-40dc-a89c-7f5c6a88f80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a07d3db-9ce8-41e7-a6e8-79df9ad4b223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cab14c-8aa5-4df9-9161-6f7e0ea27487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e935a5-410a-4e40-aaeb-7a3c8aa2554e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1fa751-d81b-417d-b5cd-e8c06045f089", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.24.210.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23567e2d-28b2-43a8-b232-5aebc3f133c4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.76.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01cc160-f150-423e-a90f-08b95f716800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfdba98-d7a9-4d38-be45-8f8ac410dfa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709483fc-c54a-477f-91e8-763646799f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fe632b-bc43-44d3-ac8e-47da8b664b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce17ae0d-39a5-4122-8570-3ff56abb5f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930a69ef-0307-4c1c-87b2-3c7372519f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5faec6-b8ac-4400-8974-dd6cfec7c4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d204ff-8a44-4319-a452-29082f970128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85609bc6-a776-4a7d-9759-3888593b1556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8430bd18-d759-4a0d-9b75-235749eff201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a71f7f-4632-4f18-a23d-be734255b951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eedffd-a591-42b5-819b-2188ab44286d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2c7788-e314-4f61-8def-956faff9cb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce0ff3a-80ea-48c5-90cd-8fa0c8df66a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef54f406-8bdf-4d53-acae-d6166c3446ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da9b51e-e551-41d8-9646-05683bf58919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c835ad88-dc25-4083-9f27-6ed35f2730b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7165bc-118b-44b4-81e3-3950cecc124d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9429a0-9597-4bf5-ac73-37683b053712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cf5b00-0be6-4d39-a7f3-05ee33a4b685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dbc6e4-84db-404d-a720-b7e9ca28ed01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab229709-be96-4289-8691-7079e8b2bfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0a62c7-d4da-4552-88fc-31bdcd48e524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35095cd-ce63-48ff-b88f-cdcedf038002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963ddcad-9296-4f2b-96d3-067b6eb38fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e70d59-77dc-4a2c-93c2-c15a153926d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4598108-ee73-41b6-aced-e70dd23481ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe251ff-7630-4921-90aa-c11692fef38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff953cb1-1ecd-413b-a16e-2d09c66c0ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36e15bf-da49-4c89-a737-614e3b97e80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053eb33e-1820-4abf-b321-180a551e311f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefc8b96-30c0-4e6b-848a-a99d3fbb85aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab3114b-0476-4661-aa34-4f6990ab388c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1c7de5-3dd8-41b2-8dbe-1a77e649f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06298f40-02ce-4158-b0e6-88ce312974c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a6a048-ac97-42aa-b5cc-11bbd5749eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a08fb3-bae8-4770-b716-7bc71d207a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5f60ae-e94c-44fb-b21f-ca5c0f04db57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f374a40-c3f5-4da0-a430-089509ee4416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b423550-b797-4523-a37e-312f59f591b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfd190e-40bf-4049-964b-cc4dd10071dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adef979-50a0-4c47-af1e-28c71f27f2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f5e9c7-5ff1-4c7c-8de6-9c13fc825e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce5f6df-641b-4075-ac10-104abce03c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a411b447-2f82-4f46-9172-75f301f5a743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba91716f-2af4-4b2d-a26a-55af3395593c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e94ee1-321f-47ff-adce-5e7454a70279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9239f3d3-c58d-44df-81cc-637b0197e9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd968c73-2546-4114-b899-add76ea120af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be46f47-38fe-49bf-9dbf-62fdb71fa066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a31fc2-9fdb-46ed-8c64-a3f2b58fcec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9ec332-b0ca-429c-9c59-28be03109074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f046de5-8a06-4c03-aff0-d7835107b0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.111.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d0459a-4096-4eee-baab-98fb4da55d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805bfaed-64f7-4e9f-8165-4e5d7b18574a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f373dd-5005-480a-ac05-b97154fdbb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.203.76.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e17fb10-fdb3-41c4-b866-31f5905d6567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.137.203.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbcd2ad-7bce-4aac-bacb-8bfb9702b1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.74.166.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74674b1b-8835-4ce9-b8c2-63f1b0f36560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e973c875-403a-4c3a-801f-230c8dd9c7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.160.56.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9b3b02-212e-4cd0-9b0c-898b583fd2ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02541ac-513f-41ec-9615-affda065f130", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c43e5a-291d-47ac-9a18-9b18d71b2da0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed52ffbf-6562-4f1b-9c78-a567cdfac080", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54337e44-679e-4077-8128-0f9bff679a53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d084d5d-8c83-4bb2-a954-2eb1811aec49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab592dba-44eb-4176-89a8-f68b3d18aaa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e246988-34d2-4559-88fb-33e4f78bc1eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bcf3b0-d5a4-48b5-8276-c4b4fd49ffb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d661d82b-1296-43db-b59b-fa8412bceffe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a85e893-e422-44d7-b44f-e91ddd887450", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4c65bc-d709-487b-a25e-9fea0d90d241", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a15b2d-d2cf-49a7-935c-b8a8b92ade4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c117a0d5-112a-4e60-a2ff-4e5dea5747c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84939284-003d-4e98-9686-2ffafb5dbe38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b2b21f-9992-46d8-87bc-92a4e4995a82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33b6a4c-92a9-4e6d-89ef-6484f97ada6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5a91a4-bf77-4061-925e-8e99f4ea0b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.88.8.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab822f0-8429-4e3a-ad9b-432f08f2115b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.20.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a17698d-f8be-4266-9f59-f64aba0bcc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4df467-5a6c-4df8-8eee-c17e50f89149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.195.59.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33c383d-52ab-424b-a7ab-b65d7bd73afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc318fb-6bbb-43ca-b0b8-f8991b21ab14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.81.97']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867be224-d72e-4495-bd63-b3e1bd8b0338", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.232.176.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9c421b-7feb-4986-b4a4-f517669dd6be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3717ef08-da12-4d5b-a46f-3bfd0a8b3ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.41.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f5c5e6-9280-4b68-ba28-201f15d29b2d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.92.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cdf3ae-5471-41ed-a804-3d2a37a67589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.248.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a36094-08ae-4707-ac41-ff9c6d67c72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.255.177.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f598fba3-b165-4aca-9992-426269867a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4886515f-a09a-4812-b005-c59ddc4c474e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.78.119.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d2b7f5-16e5-4c27-8394-9b6b886a9262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.84.195.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f41405-0c18-4192-b778-15c0de4a27b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.84.225.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bba0b9-834c-46c5-a3e1-bff0d6b788f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a1745c-ba89-42c0-a68d-dd6fdf7639a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.216.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107cc969-a195-464c-b1f5-c9a8c902e4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ebe13a-7ddc-4004-b3b4-f5c6fc189474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.175.146.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57ba120-8dbd-422a-b18a-6e6a5d63e6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02433635-cc52-4305-8394-3913b9f25524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a85f6e8-5a0f-4fb1-bea3-63fca1c754ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7bae2b-ff45-4528-8e7a-53d574f2d02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0b20bd-6b53-41ab-a76b-77958509e5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6617672d-610b-4611-bfc5-58485e95e9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1740a653-56db-4c91-9eb5-75ca7ba2c64e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.209.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a371ac95-7437-4b3f-879b-7f00bd5ac603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.104.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e6c5de-f83b-4067-b6fa-270ac910dabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.95.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2815f1a2-ca7e-4878-8b8d-f2bc82f7d08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.99.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25ec9be-2472-4aae-91c5-cd490ad413c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.255.164.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a81d9ba-7991-4ce0-b9ab-d3466a471b3f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.3.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a15b179-36f5-4b3f-9d5b-b502bab4176a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.4.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c20d96f-2f4f-42c0-a38d-6a750ea228cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.41.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f2ac17-09c3-48f7-8378-3d28b8229a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e2d794-7401-4d30-9135-1dadd0ae85dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f563252-5d5c-4529-b89f-da0b483d73c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e93f79a-a6d1-4eff-a457-9a12bbf411dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.132.26.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df86c4a7-5667-45b8-a328-c679d8f90df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147164f7-37d6-41e5-9185-1c714978fc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc53be7-79e8-41aa-9233-92ca1d22ab76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733b641e-59c7-4f74-9f1c-801c7d2eb2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a03cb44-dea3-498f-b781-9772de5fbf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e4da13-9a0b-4b50-be3d-f8f252d1b767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e07305-d6c6-410a-94c0-05588ba5def2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78186b2d-43d4-4885-a8dc-1db43653a525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cf5e36-adfc-4e2c-9295-f9916c6644f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5275640f-30bd-41c7-bbcb-25689bbaa51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddb06d4-0f7a-45bf-82f8-fe51faa00c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8964228-b768-41ac-aadc-819343d42297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab79374-9838-4e78-ab3a-1349d10c905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1fdf8f-d371-4e41-b075-7c130bdec88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6b2df8-86d7-46d0-ad94-96de563ada35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9465ef-650b-4f8c-af9b-6b6fc412473f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5bb936-875a-48f2-b013-f5cec795bb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb92bb0-8a2d-40c0-9b3d-7a7aae74fc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cc1a40-ac49-4e0e-bb73-fd943110e44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8822806e-e841-4c63-b46f-a51f5ebcfecc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.94.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f35aa7-fa62-4d09-b691-95ebaaa044e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.49.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1387b657-389c-4039-9119-6bcb86c5242a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.27.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513be0c5-7466-439b-924d-5c4d1eef2fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.122.205.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a3ac6d-53e3-4737-b5cf-a24e2f63027b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.21.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adf5a51-041a-47c3-b14b-7562cd6c94fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.70.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1785e03d-e796-4ae0-882a-8aed5ade8208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.43.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e136c475-2506-4935-af7d-2f4c08ceec64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.84.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3310b063-d14b-4a3c-b2f4-a38ea28d9674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.84.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfbe2d7-bb47-474f-a809-6acd6ed12d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.108.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa199d5-a8a0-4e50-ad42-891d9841a95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.92.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ca63c7-07d4-43dc-b4b2-9c9796c8cbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.151.67.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7c2e7a-1607-40d6-8d17-f4ceffab91aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.101.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a14f88-1883-4754-9a4b-d3d406c579a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.109.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aa696a-a64a-4eec-b9ec-b3a95a086745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.122.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc85457e-a379-42cf-ae40-9d673c6f36b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.139.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f807c87-9a46-4419-9e8e-aa37a842d36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.141.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b61a196-cfee-4e55-96df-3a85d5a44486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.150.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4878d45e-0666-40a9-a90a-35238dab2f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.17.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36ad403-dba8-4fcb-98e6-585a720c72fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.184.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84cfe0b-8a4f-4743-96b1-84764ae2588f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.24.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5494ae8f-da7d-4335-8d65-32014414de4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.35.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b25f360-557e-43bd-87fa-bb0dfccc540b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.58.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05700a2-632d-41ea-98bd-6b77d6277bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.73.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df04ef4c-40fd-4473-89e0-3d916b5a7241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.177.101.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b68eb9e-0fb5-4c18-b5b9-7697121e251f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.179.154.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd4d938-6171-401e-a25d-b59bfd75de8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.7.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008f9692-a9de-40af-9c31-40a9c8a49ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.187.143.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793d3aa1-936f-4cda-a84f-e9a660433d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.68.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acff1161-5977-4ccc-9c11-19912718d4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316952bd-8fb5-4890-83d6-5d569ad125c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef05f1a-5f1d-414d-904f-aa796fa2f12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.212.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983b08c1-64bf-4e14-a038-ae9cfe7ec960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.124.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b253504-5159-4f99-bc49-aeffa158ddbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.229.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746ca36b-c30b-48a9-bbdd-d0962210364c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72ef1b1-1ee0-4e7f-beed-895803a00e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86be990a-bc87-4a43-b41c-72abe4f2a97d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.236.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c1220d-593d-45e5-8ba7-14e2724b802e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.129.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36fd359-ceda-4581-b6ba-b8b3189d1f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.132.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7977e265-c9bf-4c27-8c72-7b4d2328daf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.140.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2225f1-87a6-45d0-b176-dc00bcac2b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.109.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9307f28f-7001-4b5f-8d85-d054beebd055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.131.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc74b487-fe64-4dc6-87d8-1dec17f583d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.163.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19829ce1-c84b-43f6-a2e4-63a00251d865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.183.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bf4a4f-3d28-4eb8-b7e2-6c29660fe961", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.253.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aabe10-e32c-4fd2-bda4-fdfd11aac4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.73.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1a06f0-3de1-4aeb-8af9-0b896f4f82c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.142.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ddc51a-9cb0-48de-8f82-738633cc1dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.141.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef4b234-d924-4bca-bed8-43fd7c957489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.181.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f846fb-77f2-4922-a6cf-65c249f37f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.186.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24465a45-381f-4c56-ad25-e63df753b25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.243.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f38886-6550-48e1-995d-6132acf46a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.121.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c39f8b-2838-459a-ae5f-2b9abcb5604d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.199.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ad9be6-74a3-4c0e-b407-de149ee3b7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.206.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152f93d6-f540-40a9-b7a2-51abf1bf4733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.33.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cf814d-79a1-448f-8cd3-69594d4968c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.40.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c535b49-db59-44eb-9914-2f566569102d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.9.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0507c118-a33f-401e-af31-28d7da5d808d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.92.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93588859-12b3-4ffd-8dea-c838af3449df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.234.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73321fe2-bc8a-47a7-8782-da09dedabef9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.72.112.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4455e1-e85a-4657-a92a-2b3dd94a2f27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.255.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef25146-54f2-4ed6-b0d7-0a99142a11c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.7.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b097b9f5-98f8-4d26-95d6-d77f28cce38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.151.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61e0cf4-9037-47f9-a4dc-901c03a4ee12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.183.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4a0032-e663-4061-be6c-afe6dc0fd1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.89.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd4252d-1a3f-461b-8cca-9ddf9d53f8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.144.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cc8e6c-b457-45f8-ab82-164985bc9e45", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.165.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b638df1-76d2-491b-a2e1-67702b8ee46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.238.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaa213e-ed0a-4252-b103-6be9b5e72844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.7.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f425ae-ea79-4908-8c59-1f47df6a889d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.145.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a4d27b-d947-4650-bd57-c8d684fdc9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.205.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77a5086-628c-4a24-9c2e-a3ec35309775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.210.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b4325d-944c-41f9-a729-446277d0294d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.236.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7621c9e1-9f19-4109-bb44-dbe6db16ddbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.93.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0841f7-7e36-4390-b7ed-39ff3e0a28d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.72.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2cf3e8-6ff2-44be-b950-b2cf3f1a4c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.150.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb88d64-5dc8-4fd2-8f50-6e86206f57a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.217.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a886a9e-0eff-4191-b093-adca1cb25813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.91.51.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfff53a1-772e-46e2-a664-3f88df85d5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.204.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65a5a51-51a5-4a8f-83d1-4b01617b9992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3670399-a8ba-420b-8897-2e005f82a1e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.173.38.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bdcfd9-d3ee-4c6a-8ceb-9a97e3062743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.180.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03be6ee-063b-4872-b8af-fab34f5e3bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.123.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1117356d-4e80-4d73-89d8-27d63421cb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.32.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adf2cc5-8d4e-4dfd-81bf-ff14aa19e0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.99.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc98093a-78f9-4570-8f2e-a4598f28c001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.199.67.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ebbb2b-9936-4a13-910d-45b3de4ebbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e2d0eb-b9a7-4665-ab97-088957ed92ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96514f66-deff-44a2-ae1f-7bb7f403a427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c918d7ff-f615-409d-a97a-c6e9c1f75c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfd3dfb-cf32-4824-a415-f3fcef2cb016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f853be05-45f1-4043-9262-2517bd9228eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab853a45-aa29-4b49-b37b-4ed2756447d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39707a56-c23c-497f-9ae0-e80beea5efba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f4d36d-228e-4f51-b22b-f2d87772dcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f861da58-4c97-481c-b567-308156765863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55908b1-0c7d-4bd1-b697-461369f13ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c96fa0-d17a-4472-9fc6-af6278b93d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d0d9f3-15e4-40e7-9807-54a9b244cc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797567a4-f924-4a85-b57a-84a9d7c39525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656aa375-a5f8-451d-81c1-f57cbcc4eacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef44f81a-4d0d-4477-baa2-49770f864a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a44304-9d64-4cc1-b5bf-5dc4c6ba60fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff36e2d9-9411-4d73-86e5-059f5872328b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7439676f-fc87-4044-a441-cd4cc42d0751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fd4d74-4673-47de-8875-5f2fcabf5166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b5c86c-6f94-41e2-8a69-cc5862e0b017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c57f29-020f-430d-b379-e01077c5ee99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478674ba-cce3-4349-bd2a-625d9056480b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229b4083-6e75-45c7-a653-a75960b98389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29922bee-5e54-4f68-939a-660f94fe1d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d19963-55b4-4059-8acb-d0e53bf99fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0a3e4d-0ece-4ffd-92a9-3b97252acbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884cdb74-b783-405f-b7cb-ec4b4f6885b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e51ea1-5426-4e45-9029-9713c2bdca72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea0cef8-9b13-4419-9c03-522dfa19b31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f61411-7c7a-4374-9cfd-743d4996315f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06acd2f5-0324-48f8-8463-8ff7aa9ed01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9dfb9b-2d76-4e83-a1d6-4c6f3e9ef258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8389a010-813b-4045-9048-ec9a1be438b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69612d6-fa7a-471a-8426-395790d31abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43e676b-b9ef-4941-a3fe-3fc1a302a9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0024c8-726d-4f9d-9611-3a7cc196a520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d404aa8-886e-452c-9b52-c40a0d44307e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088725c9-971e-4a0f-b003-2a6caf4833c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbcf72b-56f8-490d-9fb5-8d0d32ac2e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de77819-fab1-4348-adbb-78a26f1925a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e3b185-4e62-476b-b6f2-343a5d4b2459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753fe983-a61d-4637-ae34-0f07b9d167cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5673d2-1684-4fe3-9053-604f9b210c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3150b326-79b1-4511-a0ac-b80984988b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32baba35-b503-4afd-ac8f-7cfc8ad891da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8e4bf9-1fb6-474c-832c-ca0b26271cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7286042-a720-4c4c-bba1-5c7e709631fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd165f28-9157-4bd8-8ca0-24ee66882640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40d65f9-bca3-448c-b2cf-2ae587aac519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593d4083-72ad-42aa-b3e6-b1b7d3ca5324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12580ac-ea43-4135-b3f3-e0059d25d9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1474c85f-ee87-4de4-b4e0-282386af7e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7ab0f6-dd44-43f2-bded-41f96308bb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54820b98-edf6-425b-9138-e53f91bddfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cb9d47-ed62-4705-a9b7-3744b9e4accc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc681d11-f664-4425-9a0e-bc4ae48119c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e55942-cf54-4b49-a7b8-0439551fa5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dc27f4-4748-4582-b7a8-ec559d3a0a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab13c79-6fe7-480f-a413-f8cb80958b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c6baf1-d74c-4c9f-a78c-9c035d753165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01ec01e-1d46-4054-a030-dcef3ccf9482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74308513-c414-4cfd-b770-051678c3974b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e769b1-4eaf-48d3-a81b-fd39baaa5d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f5b6bb-e3c7-4877-9819-6769bc709e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65e520f-c296-4848-9ebe-542bf28d528f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3053f409-2b66-4c7d-b3dd-4a80c7e86d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef60eb57-18ae-4b25-ab69-d4de477c5a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0e79c6-db23-4e04-b968-52cfb6fd328d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f215340c-4d03-4136-8a79-4a725ee5e2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0787fe3-b31d-401b-9652-27ec56d1da8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e8af3c-d5b2-4a61-a4b7-88e3807f18db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d222ce14-096e-4a67-b53e-bf14c4b91497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e3c0c9-41bb-4b15-9cd9-fbc1f65fdb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a86eafb-34f8-4aa1-af18-ad7d639cbb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48193bb3-20c1-4e3f-b96c-524cb3fffbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218f8d95-64d2-4b4a-b0ad-918fa139f7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc99542-38e6-41ec-a9fc-bb269c39f32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f11e1b-05af-4f67-a89b-37c3fb9484bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90621c79-f7dc-40d0-992a-1b2d70a05fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ae53dd-f81d-47dd-85da-5e0d4021a0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7789fa3-5caf-40d7-94df-e85a7ad0501d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c42f266-ba9d-4f1e-965c-6fb8d51352af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6722eaa8-e465-405a-bd0f-c575483c572c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58104bf4-961a-4374-af47-ac1de6f7c8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450b490a-427e-4100-8bd3-de6c82e020cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73e76b3-0dee-43e5-82f9-52a0cfa2d35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772022bf-e4cd-498f-a9c0-29d78c003a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32345450-dd70-4ec6-8656-8a2368ef1862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e870d5dc-f833-49e7-881a-7d7c002fdc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b548a4d-26ed-4b0a-bdc3-cec34eb29371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4d8f0e-48a3-47bb-8aea-51f3f1ab9d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b621284f-21de-49ed-99c5-6755ad6f5415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86898d89-97b1-4def-a9d0-cd6859517663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8222bdf-2588-4739-b497-65039de5be48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a27804-073b-4752-8a2e-f114d336991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6627dad1-d226-4c47-9c1c-7f0c10071c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10036f51-e475-42de-b0e1-716f980b653a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1356a260-b48b-4e05-aff3-29aa0ffcd053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d324ad65-d0d5-4b1a-9482-53acf0de4e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b5a36f-cc68-491e-8557-c0e9291dd46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988af30e-a7d1-4219-9fd9-4ae6d3c9940d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4929734c-2907-4dd3-a886-00705b913641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf824e52-a266-48b1-bad1-cc54d70bbd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa45a133-5776-4e94-be7b-902bd27b81e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0eeaba-f1a0-44ce-b074-aa4daaa14d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b8b19f-62cb-44aa-aa4b-843176276072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e8ba90-21ac-40d4-b2d3-d12078423f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0def32db-35fc-48c4-ad21-73711241835e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de77fe1-f389-4be5-af19-4fbcb2d39c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f2490f-8196-4593-ab32-4e4ae11007a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63a2dea-a06b-4a79-b391-0e733fede615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddc8d0d-7962-4850-bf55-df821e857adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4371fae7-c279-49ce-b1f2-3e921dd65697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66059bff-3b91-4325-9164-e0ee94fc50e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cee3cf7-d415-40ab-b0e1-d3d2bcc7b641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5e8e8a-d0c0-4ced-ae96-2fce774a9a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc38cb69-3937-43d6-83a8-87d8a90b73d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0c1d16-ecd6-4018-af8d-907d97536295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e572d6-f190-4a28-8a6c-a5fb89a7991d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe0ba80-7f52-492c-9e42-feb75acdaf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a220dfb5-a2a6-412e-a651-5b224b6f3a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3936ea84-0cdd-4e2d-8e03-64029cb10115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320e6f7b-2544-4acc-a9d5-f166f93839b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e297fe-0593-4d1e-8410-9923b4efc8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b407b277-92c8-471b-a539-e108114e89ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b11847c-06c8-49c8-9483-b045a205ce15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1914815d-1fce-4a29-beec-be318c3caa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192c2214-549d-452d-b87b-4e134212dd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f0e523-3b08-4ebd-9761-8914c186740a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d892a6-14ce-4c4a-8c90-7d5518397d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b62ef3-e942-40ed-ac46-c3ae16d6ca11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860bcb81-26f0-498b-9326-aef2ddaa1fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1e85ec-ec27-41d4-9939-91165bacfde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04593cf5-ca41-44e8-8fa1-dc6e30e4a13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f6f70-e2d9-4d4c-90d2-8409c66d26c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc04ec9c-fd1b-4da2-9fe5-3f17288ba1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67df6ce6-5360-45d7-b561-f763301f51b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2932cbd4-3135-4696-8f71-ba8ed465db06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2849c8c1-f127-48b7-bc1f-1ee41ac0065b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800534d7-ce77-4530-999b-325da7ffe5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e83f31-d77b-4d1b-beb9-f9789a2fa643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2f094d-691a-413b-9f08-718e14e9c3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8ea44a-ff43-4162-980c-7a52284bdd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792470c2-b5a8-4554-adf9-fe2a85355c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0639ed-2084-47a6-9691-6c0717895016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cb1ab3-4306-4fda-b175-8d9814400a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ecb872-f62c-4ad7-a49b-37d5a4444681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe07fbaf-381b-4200-af3f-7e3550a0c206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8240d910-0926-4c9d-b7db-a92b9edd8f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac41c79-b3f9-4484-b9e3-86d02aea13c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420fec55-4408-4f7f-bd4e-bf96e0353927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46c85f8-25d2-47a4-ae95-a7de0f8b2ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600cc33d-6b1b-437b-9596-69bce3818faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74b2b32-8f93-4f60-b58d-82373fb122d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31805c37-703d-45f5-a997-e0300d713cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f298e2-d931-4778-beb3-4b4a9f891fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbfe33d-835b-4cd8-a51b-411c6c800abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d4273b-0c8f-42b6-af27-2aecdff45faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a874b634-73cd-4554-ba39-65b211ef37fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d35c426-111e-49d2-8f05-62fd6ee3e288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c8a145-2c06-458a-946f-f36e7127b9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4d22c7-8403-4e52-9ad0-1c35945faa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a57681-feb7-4016-bacf-005d0c84feac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dbd667-1329-4b49-914a-657e9ed40feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b5a512-1da6-43b5-962f-2d89ccacdb5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89420109-1425-4c3e-9626-fbddcd3433dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc8a45f-3786-4013-8103-b979f87caa6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8caab32-718d-4ae3-a9c3-bdb58fa0b4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9585a8a1-3993-4f88-8529-7664891069cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d36f6c-db58-47fe-a280-76ba84fbb92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4a8066-a626-42e5-9829-7e2bd25201c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38aec48-5fbf-40dc-8fe8-8be9d3afe5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cba71d-cca2-4c5f-a154-4717d8291e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41de9660-bd6b-4b04-91cc-eb1f18e7068c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8797ae-314e-460c-afa3-c2f599ad5a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4896616e-0f8e-4867-b845-cd3a30d8436f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678baaac-1513-4ac5-8427-797cf1211bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16c14b5-7211-4ab1-9581-308a035d3ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed14bb0-80fc-4cc3-b68a-3869bd8cce5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb1c689-fba8-4f4f-9cfb-1051fed1bb4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858da14c-82ba-4f5c-afb7-f7eb7a6ffcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f5a0df-79cb-497d-a729-931fbdce5200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f7babd-92a4-491a-b780-318f46a509c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad14a36-a91e-41e4-a8c7-97affedaa006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7678c46a-0612-4de8-8fe6-d9d7764e6287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d5dfb6-081a-478b-9212-5673e0d8d5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76380ca-aa73-4364-be3a-61f25caa4da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdce5c6-d773-4479-85fe-7244582600c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50be5bf-aa34-4dc2-b54e-e1906462c608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a40ae8-60ad-48a4-a95a-f327a8a400e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb81ca4c-7eb4-4c43-aa07-f392e86d390f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db64e4b7-d002-49ee-8930-eec90195de18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a50e55-1e44-4652-8088-5364a783a2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587016c6-b89a-433d-9965-8a062a8dbde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4498b9b3-528c-4ec6-8a20-0d212eed1909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a21b34-705e-43ae-a65f-14258e6d07a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d469b3d-7a73-4a39-865a-25d5b60ec9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15d0b8d-e6a7-42f9-b844-4c396b9b206c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb654816-7367-4892-822f-bf15c93e66b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04782a0b-0b75-4350-9f9e-d61aa9126274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a028b6bd-88eb-4541-a24c-ca95ac875a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3758daa4-1ed5-4d6a-b567-8d6e9f4659de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ab38aa-e25e-4555-92c3-747645d0b6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b76393a-7c6d-4ccc-973e-80f1602c912e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae87c39f-68a0-4fe4-a79f-3b3cc34f179e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db31d62-8abf-4827-880b-bbaa3917894e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61688bee-5223-4c24-8af6-d45db4030105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.172.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109de744-ddc7-4ced-a06a-41f9982b169e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.174.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b56b4b-4f2e-43e3-83ce-150c217e0a02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.226.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08aa21d-81f1-43e2-a181-cdc42e5d7e78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.247.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9878c9-29ab-408f-b7a9-24db07f8c6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.57.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a88f3f-af33-46b8-ab6d-77b5881c6f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.82.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23ba4cd-d2db-4853-aac2-ddd0080759a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.85.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e9c7b5-b9fd-4c7d-9dd1-12d568d4a4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.86.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00b76c7-acbd-4448-929f-30e458b1056b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.94.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e1854c-cb48-4775-841a-18afd33a5fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.28.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3aefd5-5825-4feb-aef6-a9c527524d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.63.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb92072-a712-4b23-a619-bf9e84dc3425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.134.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368af0fe-a7b6-4f52-b224-480f57075594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ddb35a-dbc0-4e47-8606-c5d4bffa6291", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.253.9.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1749449-1011-411c-909b-fae9087887c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.33.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde951df-4b77-4464-8f1f-203d982eb0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494dc96f-dded-494f-a04f-838a56b9278c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.3.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa85aea-796f-4b9e-a517-6e84fab89ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.54.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d98c46-dcf0-4d8a-a80f-33f2c083bbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.56.204.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19803ef-f650-4664-83a9-bc96db2e2987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.89.252.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98212fd9-58e7-4a10-b53f-6647df7ac849", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.0.247.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904ee35a-b890-407f-b225-9d529c04a275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fadeb2-a239-454b-a165-e5fc9a370304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eefb614-f3d5-4e2e-a8ff-a6c713400ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1815b2-0fc4-424e-be75-beed0ce9451f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da1c7d0-593c-41e8-b999-4615fb604db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a5a145-9b1c-4354-909a-d7326b3b867d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85ff18d-48d1-4fbe-adfd-08b0335efa15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03a8163-d620-4b4f-b5e7-6d881d429a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf3d79e-fafa-44b3-a2d6-54ab34ba295e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da32384a-6e6c-4fd4-8ffb-0c81d0603d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.197.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a29a35-6f4b-45b2-84f8-7ad52f927dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.44.238.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f977ec40-e1e0-4a60-ae8d-2e2cc6f6519b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.78.205.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e99134-9980-4f1b-be32-49d74d1c388a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.122.202.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9956df-eab8-43a7-9ba9-c0d20c963d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd66f416-4878-4093-b6d8-7cbf9ef48eda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.156.230.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abc1597-0d2a-4d83-9dae-41b425cb6792", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.225.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf57942-085f-4360-ab73-90a90f14ece0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.77.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb968a5e-52ac-4097-aa1f-cb96eddb4f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.79.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de77c82-bad1-4ef8-ad2b-b60405753288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.106.172.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c636d3-4d17-4831-9063-f86ae52cd0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.153.251.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966e4c02-af22-4e7d-a60b-dafb7f3a8f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.61.48.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb71f74-1f1c-49eb-aae1-5c1330ca3b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0dc948-c2dc-4783-a2d4-4a73e8d81abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901287e9-2a4e-4ecb-90ce-e68f8cc7549b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58757012-a313-4d35-9f7f-030834d5d137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20e8e0d-a573-4988-b7ff-25a48e5dcd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48e7c7d-561e-4245-9aee-6a2d4b544cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c83098-4b0c-4b8f-8ae4-f3a5a9d9d2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4d5dd5-8616-4edd-9984-70430afcfee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e232850-e633-4143-9916-a67a45fb1672", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0176fd-eec8-434a-927d-b2bcb599a071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b0913b-0a62-4661-8f56-d385cd1a7ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c3321c-4efa-495c-83ec-d8529715d37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd02696-096d-400c-bca6-970243e16023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1115525-ee64-4b5e-a2b8-a95b238f6499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191f2402-a7c1-4ce6-b0ea-1e2b694f6046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33fce5d-c390-496f-ad4d-a9344ba8fa2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588249fd-b140-40c7-8d79-6a4fce65e1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b033bd3-34a9-4cee-8328-f580a5019108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e131574-af83-4cd4-aff8-7e20aff3ee6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dcfab1-78fb-4957-8715-0a95d3d55bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34852059-4680-497d-9064-2e283820323c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130f805f-4366-4ab8-8c29-7232838b26db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c029dd1-0c5e-47f7-bb96-84a52422d4bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61aa4298-ae08-492c-b7b5-458f7cf07b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.208.147.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d40126a-bbf3-4693-8880-a1d8b95ef5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.64.172.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed232a2a-886d-4302-9ca6-8885ccb0fb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7cfc47-8b04-495f-9311-3a4ea85902fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.240.130.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f820b4-88b7-4d6c-a3ab-214c413d2754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.122.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8280010-98ad-4705-92ae-5c44ad4dbc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.154.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8ae9a2-fe68-4ccc-9996-6c1dd0ada50c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.174.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d222c0-dde8-4d2c-a1d6-949aa0311873", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.3.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3518ca-c118-4843-b529-cfdc96d93bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.67.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc17b4a-cc95-4932-90df-b95cbe645302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.243.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3b28fb-011c-493d-b520-451fdc4cb84e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.100.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820e66d4-4b7d-4ee2-a308-441b628b1bb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.3.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244fd8ff-eedd-4735-8de0-0ae96ee2781c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.54.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9b14c9-13e8-4d3b-bb20-91bbe6e19fd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.167.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f037dc1-5d4a-4c59-a4c3-53155a815f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.122.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ce8b17-8d80-474b-9ec3-f8b0b1801f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.36.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bccf386-517f-4940-abd4-68ad2a00827b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.37.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5f70f2-4801-4d3a-a42c-26c4466b62a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f8cda6-3249-4003-8cc9-8ac7d91b5410", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.50.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519c8afb-11f7-4a84-9072-ea3ba40f3d67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.140.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52690288-1562-48d5-b430-3d61278952dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b6002a-246c-46e8-bf75-d36747e446a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.219.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c55d6b2-345b-4473-a649-89c5d0e0fea4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.217.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1108da11-d2c3-4f6b-ae48-050a384a38ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.114.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5f3aee-7168-45f1-bf00-2e89e1f87679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b289311-1b85-4898-ac30-88a1cf02a04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.170.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108504f0-f125-45ea-b50a-e9fec9b653af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40978387-2dae-4730-9542-07ce32cf453b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5af05b-0eb6-4228-966c-0436864f35aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.131.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57527e5-431e-4942-a339-73aec53ba6c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.226.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ab73ca-0f3c-4163-b461-a4d7eed61778", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74ede41-b81c-485e-b083-1dca81b71b9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6050a5-af1a-49ea-ae72-337888bcb378", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699bf622-395b-400b-a41f-bfe087b3f330", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265ba74a-7dcb-435e-ad05-ca4b40609b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557a55e7-2d55-445f-b579-af72a7b6441f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad5c640-3bce-47d6-9fb7-93ea9fd2b39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1c8d50-ab50-4eaa-bc3e-2928925ee009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f07459-61af-412f-8540-425cd29094d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b2838c-f408-43a2-873a-5cb3e856a34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183b6f06-552b-46b3-993d-0d1d0f30bfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef41a4ed-23a4-4d19-9fff-6b10c4acb7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.180']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058fa845-3bf3-4b06-8832-30febc08a1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98641f97-3480-4cc3-b297-284c08b02277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63a3745-67f2-4c82-b55f-5e06cce5ebc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d2f2db-5de9-4dd4-9b4f-1fea74aee5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a282d41e-5429-4d58-9a5b-14a737d13c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e3670d-c061-4ff1-b4e1-8703624b7328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86661a0a-80c5-499f-891c-9b9baf3d10d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb098d55-0098-4071-bec2-84a1c479bd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a205af8-5882-4d74-9c9d-7efcce68c9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b48bf4-90fa-43a0-8d8f-d66882358a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.37.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce99080b-6b0b-4001-9a9d-ff6692176803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3212c015-2430-4c34-852a-93f268b44ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09aca69-ecdc-4280-b292-804455835904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.194.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c0b400-73a3-4257-93f1-44494127f590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884218ec-b3c0-4e3b-9c71-6f1934557701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49e4c85-60e3-4f04-99b7-2c40ac10da0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.247.181.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7baedea-d2dd-49d2-8955-04b7b1b5316b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.87.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66b9cea-f2ad-40b0-8bac-eec186c11ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3afc8fb-f081-4cc5-8db8-e0a6f907d87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310711ba-ec57-44cd-9a0b-782410b128f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59283b1-8202-49a5-8479-cebca6e264be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db223983-a5f6-46cb-8955-1f299398d844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.122.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8911b6c-d239-4e16-bb4f-deac97bdc2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe03e50a-dff0-4b8a-8505-7a261a8c1379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec834ad-d5fa-4441-a071-4427a6802746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb218d22-5d31-4bb6-9185-b4908e14dc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3294ee-c995-4ff0-ab42-8431ef8c9ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6f6bbb-4e5d-4b65-b16a-a119f589e5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1d4494-e5df-49b6-8e90-09c8eaa63244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d74e323-36b8-4618-aeab-09d11384b0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07b7df4-05cf-44c2-bf41-efd0d60b9824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67675f63-131d-416c-ac52-86cb457265f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77f5bf9-8b7e-49c2-bcf4-c237abc3ec94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118765f2-5a0a-4b53-b5f3-db750c146210", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6823978-e4c7-4308-9900-680a5cdd5f03", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14384aea-941a-49f8-b6c6-3f501a9ae25c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520ca7b0-9e0e-429a-ae5a-8b34287454b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42661bcf-de92-47e7-85ae-6ea4b304ad61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968c77e8-7ac4-40bf-a0c4-460fd5ecd0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf6dfbf-1255-43eb-8365-d1c0133b83b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5123f75-a23e-48e7-a1a9-9c9dcf3d1059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93109f26-b99a-4dab-ac07-079c9865aedb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcb0fbd-30a6-4352-9ab7-f3f0c31a7809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64f2df6-9aa2-46c4-95ab-157da2c0e279", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11db776e-0449-4fa2-a809-769430c31b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ef8b42-81d4-4bdc-ac1b-2b151b766b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c4ff67-a687-41c1-95be-92bda5a9bc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3e4f74-d013-4395-a640-bf2474b8bae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5bdadf-95e3-4d27-afe7-0cbf8ac34144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2870bc-7437-41d0-931c-68b2b259f604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27464acd-22ed-4443-9b03-98484a60be0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27b27be-ed0e-4302-a13b-07aa56ddd2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e95c48-3827-4c28-bbc1-796b0b8dcad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a368f1c1-0f90-4764-b818-86afc716fad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c410a9e1-8732-48be-8107-9002f4a60292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da90ad20-7c7c-4f60-9c39-b6426a9e2ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169c7731-395b-4e64-a8a4-4d1e5b54e581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2394f02-bd43-4bdb-bea4-e713832b9bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94aa21a-6579-41eb-951a-6a2942eb9b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd8cbeb-3201-462c-9f8b-1bd2b774a86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fefb8dd-1611-4caf-8fbd-8ed3d9ec50c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a7213-1ca9-4db2-aa2b-9eb23405cca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996684fb-0578-4d18-b96b-25aa1dc65856", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37592b1-e044-451a-9e7c-872120aca496", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86362ed7-bf15-401f-b9a1-724706eea3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189e8316-97b0-4466-92dc-6e61d42ffebc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4439b762-7afe-4d37-ad96-21dfde722b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919fd9fb-4626-4275-8760-fdde910be9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed48a98f-5bff-4aea-bbaa-747060939e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8833ec4-6fc4-40bd-8140-5bbb908ddfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e162f62-e26a-440a-89f0-af4d5a886ef2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0362272f-f00d-412b-9010-b99d1e443bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f64db18-3282-4fcb-a619-1e61cc18eb57", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.14.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160cda21-b0a7-4a60-b299-637e1648881e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.75.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218998a3-db12-4009-b6d3-c82bbb66dd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.190.95.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34746eeb-2108-49ff-a4db-3b9c540dbf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287c1900-5290-49e5-8340-a6937bc8dd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628fd84e-7e99-496f-9683-0ede3ba0d6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150478ac-8e78-4772-9008-16b6fbb88867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72869f5c-1a04-46ba-b193-869eb5db0604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb90ddaa-df6b-466f-885f-7e88df7acf9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.97.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70a8911-bbd4-470f-98ec-f1aa6df590a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faeb2ac-717a-499d-a218-a60779d1d0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac68748-e85f-4ed2-bcfd-f9fc02c98be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a0b04b-ae34-4988-8f85-ba1747157da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22636ca-5591-4413-9f12-97982e601781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78e34a3-2d16-4be7-a48c-e97a8c70ca59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf9e654-b8ee-41b2-819a-9754156c0384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1964dbe8-36b8-4e7b-b6f3-b863a8bef190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896bf6e4-7025-4140-9cac-bb51a9df3b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c7ff7d-59da-400e-a94b-09e272c22342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8a73b8-eaec-4ee6-9ee7-f992181bdee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae111be7-655e-4885-877f-19dac852e9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07aa5aa-9145-4b6c-9463-9b51cee518af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6b43b2-ccb3-4157-8c28-297005cbad7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72e34a9-873b-4d32-a15b-521d510d5552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e69ae8d-80e2-4409-91a2-8e010ca09b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d032ef-6441-4681-9341-24268c6a7e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.3.38.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22b5fd9-5925-4311-8993-994a3f44f897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb0b8b6-da7d-4e90-8b36-677a130df851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b179b35-41bf-42d2-bffa-5f2806f7294f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efac104e-f659-4b66-b031-1c507355168c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811e14ce-7c5b-4c1d-ab1b-f34123c73ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1156bf-ec65-49ea-8a81-a115bc8343a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78038be-ed4d-485d-b124-7e0c52141630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bc6394-fd38-4c88-bb7d-c3f10b89535f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7998cd-6206-4070-823e-3cf22d1444ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a028bfd-e5be-43fa-ab50-123000864531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917e3c00-2278-452a-b80c-6715ecf8dfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86072c67-af78-4072-88d5-4555cf87fe15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c443703a-bf3d-4787-89d1-05bff5594a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ea9a6e-f46a-4254-8807-d701a90aefbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926c7aa0-bc0b-440a-9ca0-99905a7aaed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576f9e8b-1c80-4d56-a773-121088d6c2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a330b18f-57eb-46ea-b930-51fc67c7a770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30245bff-abea-4041-a91c-a85c3c40dc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.154.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1ea9f9-b4b6-4ff4-b3f0-a69ee6815c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7d0c75-d328-4493-88f9-569f5bcb9385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bc5878-c920-4adf-abac-52e4b7011ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c80984-c8b2-4c08-b75d-72c95d888648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5849f32b-f32e-428c-896d-194c52a694ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aaab7f-019e-430c-ac06-4aac99de6dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.219.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b9fe35-3d4d-4f6b-8b7c-1e195216195c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5582845-c0f1-407b-b272-39e3a1928720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a417fc6-e249-4568-be03-1d598da34c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee01ba0-a86b-417f-9566-0c13a89c0ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7496534b-5999-4e82-a4a6-cca2b552f3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e182e87-7aaa-4dd9-ab0f-8b5dae635437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd43ff6a-e3f8-42e8-a346-6d8833a35e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.224.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f68d33-2f16-4a18-a4bd-dfd4c8ea0ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286991ac-5fd3-4cfa-a91b-a91ada8c6d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ce5447-541b-4ab6-9e79-d1f66ece63b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf0c4f2-372d-4f87-bef8-c74520719126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4faa283-08fd-4a5d-b678-eb7fe4c04896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a70b24-2bcd-45e3-a512-1df204abd6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9102adc6-1fb5-4125-b227-b4492f54bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e96ad20-19e6-4edc-9826-b693644e4729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7218d1db-60a2-44e2-b535-5f310407d6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5c4295-b967-4997-86bd-d0b58db44b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8668aa2-d7b5-4c0d-831d-e80acb4ef6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ed6b8a-7d0c-4969-a132-dd901b90ba7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98c1465-e95f-41b0-9ee1-40bfbcd0f16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f6cb1b-3ef2-4be0-af22-2ec5471f31ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f181d1-e836-4e7a-87d7-258684e5150c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36df9fc5-a211-45af-9fbf-5e3b72cd3393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e8eb58-90d0-41f0-a8f5-fd9b3bf60ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19df01ef-bd38-4bbb-b1ff-4c097155439a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e5488e-3c9d-48c9-a9dc-3ff672faeadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96143f4d-f34c-4824-ab31-a40b4695fe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe766b4-efbe-4780-9e25-a3786745cfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b944c7e1-7cc2-4017-b479-4708378660de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8bc404-0e1f-49c0-b489-b4ce548b84e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9ba564-fb09-4ddd-8eab-67c96437dc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6a50fd-bf7a-4836-bc33-48da79778313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca056ef1-f9b7-4d2c-aff1-6202fc30a43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f91a317-f04b-413a-b7eb-617446eb81fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6815248-2223-4b40-a99e-c693e8cb3c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c6b48c-b4bd-4738-b433-748ad5430dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771196db-1d69-467f-bfda-7e2ad0644c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e664c3-e76e-4111-968f-7ebccb8593f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a539838-4cb4-482e-b676-e64c4beedd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f0822c-80dc-4b2c-a509-bb84195b7c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55584155-b066-46f0-9752-c7e90e30f1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b89d196-14de-4a2e-b935-f408037a4543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef482de2-fa9c-4828-8dcb-f94aecfda856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d055d245-c981-4860-b76c-1618e9d75593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4260461-8209-4898-a355-d99aa5ee91cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857f0fc1-8e23-45cf-afb0-fab2396fc1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31f1939-721d-474a-9b01-7be73d00cc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1327828b-c509-49f5-ae87-f22596eca237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e757f95-4712-4db1-9669-2cbc9ab1b88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10f98b8-0f4d-416a-ad28-f511e03f2efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.232.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9333237-b673-4bdc-abd0-fde084899ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.250.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afae4a1c-cb8a-420e-9726-3cbfea18981f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd60f4f2-ba47-4147-86d9-26fc0d76119e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.160.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbb2be8-0601-4350-853a-5e73ccc8931d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f182dd2f-22ad-4589-9330-68fc620c9898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7473f466-956e-483a-8ec0-7d7df208fcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.163.144.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d52336-7039-4a50-a74d-1116aaf99ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.224.203.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac63b7f-2b4e-4970-a41d-bc96007797ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce63698d-90fe-4740-a407-5af6ae6f1ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e43a7a-4438-456c-8bf6-66a8cb769efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7992f0f8-f93c-43de-9dea-f8b27ebb954b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.245.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9527893-a049-49b2-9074-d9306a44acfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.197.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962ac832-aac6-4e62-988b-e9e950bc4da7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fb3669-0536-42e5-a35f-2fa17fc33f5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313edd8f-1c47-440e-840f-4f81478e7d5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be4364d-6e24-40cc-b363-c91f05891b54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912c507a-3039-424e-867c-ad36c15328e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.189.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609f11f4-829d-43b4-bd13-a847fe4bc00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.204.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48102efe-5feb-4988-b8f3-b62034c84b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aef68f1-3455-44f8-b82f-65c2ad59dcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6437e0ec-5954-4334-b109-dd713e0f7bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3354256-93b6-4dab-ac98-00ff3d27af24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bff4ea7-6a44-439d-afbe-159b91c2ceb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff44bebf-af46-432a-a57f-f327cddb8d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe6aad4-04b0-4346-85bd-8e006cc80651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.63.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba7f8ad-224f-40fb-8a94-20f3a4ea435e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.9.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a900b1c-e276-4e8e-98a0-1df02f6e9d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593751fc-cdbc-4be1-bd27-62229942f624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b480169c-ba37-4915-9499-7361a5fa801b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd5d285-2724-42d7-a329-1066eff21e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2983d4f0-b530-40b0-9997-d244bddbc683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a15c59-69d0-4243-9919-cc5a6657a9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6442eb-117f-4807-9bd8-6aa0471ec18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.180.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7090bf6c-c43b-4a56-9b36-cc9541e936cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f230db9-d6aa-498b-80e8-42e95948dd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26658b5e-9830-4b0d-a657-2cd7a9fbd882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069818c0-8d2b-4980-9b77-7c64b1c4e2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5317d417-796a-4aa4-b7f9-dc0ebcd369ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c912ad1c-a5bb-4ca6-b7d3-8249330ea4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8804920e-8016-4d40-8985-4f2708f3f3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ef8613-f2a9-4b35-a729-b4a845cfb165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addb98bb-8d6a-4c79-a779-97062aa8c604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4240a5f4-b7eb-45c6-869e-63dd2192f107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.103.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1de243d-ac64-486a-a38c-0026eb1e4aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbadc1af-3975-47cf-b0d6-ce374404caf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d586c8-c5a4-432b-90c9-e9ccd3a4bf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c89dc91-2b54-44bf-8adb-36e272bc6ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a4a839-9d57-4539-bced-de3a6d38eaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b977ebef-b580-440d-be9b-64868215ddc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f49a12-d451-4555-8dbe-bb5501004817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776eff88-cff6-47c7-8a6c-21151faf017c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac3759e-774d-476f-bee5-74aa0cad583e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddab0ca6-f243-4ece-a2f3-5b2074b7e8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf1c241-d72d-415b-a731-6ca16d4ec24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23215b4c-5bc3-487d-9053-c2fed55b89b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.173.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4304321e-c8e1-4f51-856f-87788bea1e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303bf066-e7a9-4864-adff-100c2fdcb50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b4749a-2438-4797-925d-c5fa36ddb15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc79b86-1740-4504-95e2-9e4dba9d3f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ad7e9e-0865-4aee-853a-aaa0e97d8a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c136227c-fe00-4f16-b9ea-79dfd71f7d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3e04a5-f59f-4613-a33b-e916b3f17174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bbbf12-2c27-4ab2-984c-44f9323b5258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1379ed64-af90-4aed-8e57-da6751290878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622b3d83-9349-48d1-a17b-71f4b4e27f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e47b239-6b3e-401c-b26e-3b0a4d0fcac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4e50b2-ecb7-4add-8c58-57ffcd25836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5afe1d7-3a9c-4110-b298-da1856f77c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8292e6b4-417b-4041-b9b1-31d5ff9a6028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.89.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a5507-47c8-48c8-8a7d-ee93c4ea110f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4421ecc-8a23-4f7f-955a-429dc4c0c2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eecb9c-7175-47ff-8543-ec136c592ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fe9020-e9a4-4b8c-aab6-5cd3a4df75b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4221c5d5-0a72-48f0-a538-59f8ef4805e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd790723-5fe6-4c6d-9472-2cd8aee705c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.141.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14202e76-10b0-44f7-9663-af9985f2fb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.149.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232b1fb1-4a92-4948-a2dc-e42ac1a7cf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0f4669-7b0f-4964-9ba7-f959c27d78ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2c4078-c432-4c68-acbc-2a77b497b661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d20ca-a207-481d-805f-ff0ed266e896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86c4280-03ed-4044-a916-14af17d32d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da38ceb-a8ed-412d-92ab-5b0877b678bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0937ca54-2ca6-4621-a00d-53961c3b212b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3e0624-891a-4f02-93ed-8b02cdf98aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e953ed-e8c9-454d-b2b0-68f83dc857e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.74.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937e70b4-bf08-4384-85d0-6ead7960e104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86327b94-18e7-40e7-b9d5-bfa07b6ba6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b9f35-9b2e-475f-8659-5f703cc2879a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.32.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a981e8-29d6-4465-bfe9-4f078152ebc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.211.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e174f3-12ed-409a-ba85-f8f8e93019b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.29.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917574a7-be90-4900-a3b1-93e85daca181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b673879-ce81-4eb4-93c1-b974d016cc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff0699b-f72c-44df-8d53-8f80702623a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c09124-6575-4d7c-9b12-e4bfcbcf3abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf60473-9ca4-41c1-a127-3dae62fd3fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc527ce6-d21e-4256-8d20-fe5398a4c5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239c7720-200a-4235-aafe-7457e86b7a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0c9fb2-a00d-46db-984b-108bb88acc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646c7aba-4be3-41c5-98b3-0da87d02b661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87643ef2-d6dd-4ddf-a2f2-9baa64010496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3896b6f8-5f21-483d-9311-7b3f3393a775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc32590-4aac-41b4-ae61-c2bf3b129cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e06327-648d-46ac-afa3-6ec4cad392d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eda826-20a2-4bf2-8a8a-0876a96ec607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb21ee-d7f7-4f74-ba96-06f1eaa5cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8ec08b-4e3c-4ff8-9120-b4f5ab6d198b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a39028-0c18-4388-b590-f6087a38fec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed3e0ab-3234-4d47-842a-1517149febc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6e05aa-f107-4570-948a-420d673ec630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371f67c7-56f4-481f-9cdb-68f0823eda3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083d48d3-877a-40e5-a8cb-18aabd57a438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd56b9f-645b-4a9a-8844-c68e71c73644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9824e853-f7dd-4c1b-9859-b951c2b367aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ca1c18-293c-4c4f-9d26-63dab9cde0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2ae545-6306-4059-8236-806d35edb24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.248.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017a05a8-88ca-474e-a3d1-7373087f04d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deabf691-073f-4422-8584-8925dd3140a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaf79b8-5528-49e9-917d-0cf1ab7d39e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.204.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a44bcb-24ea-4a3f-9e8d-493490d09fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.206.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611ef80a-3bb1-4de6-9cfc-fe37b60d1920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09eed8b9-0af4-4a06-a2c5-003dda459e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acb29e0-d280-4292-92a8-fd46e04642d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87367c7-3a66-43cc-8382-9f67ad57cc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b62bb01-e599-439b-9c78-8e51761ab196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9d273e-481f-44a1-b154-865a774ce57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.174.174.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da283b2-e5d4-454e-9726-d996b389d198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.235.136.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dc4131-8000-4b3b-8495-447035f6680b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.166.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2b2bbf-f2e7-47d6-a8ea-68100aee8290", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.233.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48259bb9-b412-474c-8e50-bf6c16a6b5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.36.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7591b4e-dc81-4c6d-99dd-a33584eef3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.64.169.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15004750-2138-47e3-b0f1-99516167883a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.137.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bbec8d-7c67-4581-a1b4-d7d69eb51062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff915c6e-15ea-42cd-b7dd-7e4d0b5c7859", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.83.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e1f10a-9140-4a57-83ca-335050aae1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983599d2-aa4f-460c-ac30-f2535ea26470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe17a67-b9c0-4878-9eba-e518334b1fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1b2398-f9bf-43c3-b4ba-b08a3f3d2dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2107b1-fe16-456c-bc40-19c603a41af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b7c579-c9ee-4bfa-99a2-9bf61721525d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4d083c-c4c3-4a12-b633-348621968945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e81c2f8-c78f-4023-96a2-8025d18789e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc18c670-0aae-4a00-be17-c7cb7ef5fd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d327c3ad-b125-4121-93c0-8fa5b57a1c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841788e2-1d95-4ba8-ae62-5792e614cf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b435a6-5ecf-4616-b4d6-28c0c0cff3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2498e9-a6b4-4d72-a7b0-be8ff8dbca32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012fdae6-b3fa-46b8-b946-6d085d61dd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d0a390-91f2-4332-85c7-30e44cd38972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a50f9d-5aef-4c7b-9835-312486aa7f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b737c5-f333-4745-9bf6-c8f3140e8f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c81ccc7-4fcd-429d-8f01-d784c360da55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c454869-ed6b-495d-9c36-a27506081115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e255efa-538d-4865-9655-cdef813a441b", "relationship_type": "indicates", "source_ref": "indicator--3c454869-ed6b-495d-9c36-a27506081115", "target_ref": "vulnerability--0099a06f-b165-44c4-a55c-8782a98dfaa4", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e36119-05a3-4195-8900-a2e5a92a9728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c9216b-a52b-42e0-aeeb-e0ecf4182fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a828cd8-3871-4c20-81fe-e795b1796b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.220.227.188']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4149ceeb-fa58-4e32-8771-4dbb8eb6b5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b40b32b-e172-477c-bdd9-cf54455d8cd1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.250.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ce79a0-3012-4393-b22a-f7c739b14af4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.250.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94acffa9-e8f5-42f5-b3a3-3db8c6d2268b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456b0afb-4394-4c9c-ac6f-d13a57a995ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f08d46e-1d59-4646-9baa-06d0865a36c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0df7398-17f5-4705-9576-e7f0fc21e244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.248.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5014c76a-2307-4795-9100-d3b006c8575e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.248.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7675bc-4b3a-426f-8ae8-493d42e94644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.37.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30937ff-8a8e-4ed9-b09e-49716891d49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148b28d2-1773-49e4-993c-862af0d2dc92", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.16.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839c4598-7b3c-4d55-a43b-a7757bf1c3a7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7df025-aa4c-471c-b5cb-b6cdbbe0663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86626c1-0ced-4f79-af09-94a1bc1551d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.233.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ece39f5-d9f1-4931-b8ba-e05a8343e9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465bf5ba-e958-4614-842d-a284ccc8b64c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.22.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704040f9-3f66-4653-87f5-5b816f8ba34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659cdf41-3537-4eda-a6e6-0ccfa0d75217", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf348fd-332f-4310-9964-b2f51387510e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6388e08c-a7db-4450-b61b-8527f838a39a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617cf0a4-3106-4fca-a5c5-9ba9b00675fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d175eb-0fe7-4058-a78c-709cfc01d2fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5327e2-6701-4d18-897b-a16f26ef0833", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9ab043-e1b6-495d-a7e2-184f8491b12a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464e6414-e043-403d-b65e-c224ef64faaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8751d5c-d914-4ca8-92f6-57d823c970d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7840a9ce-1c95-462b-ad7b-b004e0bcd338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.156.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8303a69d-261f-436d-84a2-b075b36477a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.184.100.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4991edc6-e453-4cd8-a5ad-3e42166292e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856c2d8e-3365-478e-8d3b-1ba0d9875adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cdf3b3-b3ad-4a6f-a102-486d7f57fd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e2eb08-6b63-4d69-9e07-5051d60f726b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d728b4-ae99-4a38-bbca-8e1d312444a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82ff5b4-2ddb-48ba-aedf-4475cd429498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.253.108.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f31624-4785-4665-9f02-c058af132fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.193.112.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46f8ea0-f2b5-413e-bde1-99bb1d71b37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.58.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15253271-74e2-4a2e-91eb-caf19000a0d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.108.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621c3f81-5945-4050-b473-55d6a122343e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b1df4c-47ba-41c4-9a7f-0123ca60d95d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543cd03-b887-4ae6-aad0-a1d13df22d2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec3a264-4664-409d-902f-a6952b660f81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b0e8df-e1e7-4c8b-b7ec-d1f221d5bad1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef244d02-8e05-4cba-9449-b66797b945bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040f000e-928b-4d1c-b47f-f4f1b1a06f0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d289f3f4-74d3-4b05-adc0-9257f52c8a86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eeac7d1-c0fe-4e36-927e-e66e24dfc97e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf2e75b-33da-413c-9d98-068ddcd0094e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592bbd3e-8be9-460d-a173-0623b6a4dccd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623a2d30-d5bf-467a-9a57-abe78b631b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7c7fe0-70dc-45c1-a91d-338c62378b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239ce8f4-2e1f-4f8c-84e7-ef4a9e6046c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6909211-7fa7-47f5-8462-86d738612dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bfbb20-dcb7-483e-8ea9-a042a2024a6b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.60.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b797fe0-1d4b-4693-b4c1-1042522df8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.42.204.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e404f6ef-0864-456c-838b-03eaff03eb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.239.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90260914-94af-4b0d-810e-e7ea923e1fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdee531-fdea-45f6-a99c-3e5ef39f5a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.23.238.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438d371e-f6e9-4173-b281-7474d995f441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.145.177.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55340d1-fcb0-4ce2-b42d-7b96380fb4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.163.115.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2addf01a-db4c-4cdc-a307-e5e8b199e860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.77.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24005ba3-02ca-460b-8a25-ea3a46b2e0fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.136.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514483a1-68f0-4ffb-b215-14a5970755de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.90.201.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e099be04-b994-4213-9564-064e07f9244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.122.3.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a4c765-4a69-4d66-ab55-a026f96dbf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9deaad-0b07-4e26-a35e-bc5d49b2b293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.173.38.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727106de-0188-4e18-9821-1469aa64aab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e124b045-095a-43f9-9fc9-2ae6da16f3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e22e872-54e9-4566-8c78-8f6efeb80474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6ac631-5a2a-4b63-8fec-0c8ad3e3836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.220.116.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae79e76-20e9-44a9-91c1-1dd3f5ed3a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7c0302-1869-4992-88b1-1a18c5602815", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627fe373-4b53-4698-a487-7ee20abf8331", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc495f19-d289-47bf-b119-effd6dbf0463", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.135.161.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8598d7-b404-43d6-a285-9ebdcf6232cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.135.174.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f9f406-d16d-4e2f-9ead-1ff56276ccc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.143.95.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc81b281-3557-4608-a18d-fcda203681a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.77.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e6740e-a27f-4039-acec-27141d7917f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.224.17.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fab2d2-0501-4c14-a970-8304702c6673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.102.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a676bb-9be0-4a17-afd0-6c66c4b433fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.107.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd712f77-323a-4f95-baca-7248c10c2013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.12.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688f2651-b97f-4206-a5b7-add08aadb3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.123.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fb03d2-7f76-4bf9-bf42-d2f5733e4c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06257068-d067-4ff6-bba6-b8b34f325b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.160.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e304d1-a827-41f8-aa77-f72b2bdc01aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce07051-7a5b-4e3a-b1e1-30c6c2d63741", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.183.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74e9c9d-6475-42cb-9f92-4c81ccc752c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cae00d-2781-40e3-8d2c-3f868b2aebb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae17209-6b9e-4010-bc45-099aa9c04540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cef5836-01f1-420a-9a7b-3d10d4d95770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4818c705-afdd-4adb-b25a-1c1628b54173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68fd067-f47e-4973-b15a-e025343b542c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7166897-d94e-4744-ba03-124987445a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f673cdb4-20d6-4e39-91c2-5575590f010c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1a3c33-b007-4628-b100-1d1fa9c436fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc98a91a-a2f4-4c8b-ae8d-74fb3585d8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aa16b2-2789-498d-8c0e-b9e8c2dae7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbba03d-5310-47cd-992a-14faa3d9f2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9d11de-f5a6-45b5-a392-1bb8de785d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9546785b-b910-4ee7-bd31-c36c6a519466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19302dfd-10df-41e2-94d7-26beaf5fc94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b302fc-bc5b-4cde-9884-759b3fc9e95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18174ff-8569-447d-8e28-cd29035d035b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a650d9-e8fd-40e6-b17b-45db349fac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc398982-3415-49f2-a800-fab4b6a295f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf928d2-33c1-4d67-8c78-73bb27b88593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8076f074-09bb-4cba-aa28-b9eb8cf41169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d2e88a-e43c-47b8-b286-3c508cc5ce41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36b96e1-c280-49d1-961b-a7d8ffa68967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0130eb6-0b26-4eb8-a800-07ba3607d475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7f6216-866e-4baf-9308-ed455d60f112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a441a394-32f1-430d-b5b9-bf23b9cf94d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddefc47a-22de-48d3-ae99-3a39eb0ce085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9849be9d-d0a2-4fb8-992a-92678b45dc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb38b71-e417-4d5c-9f11-e0ee27f50239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df571b72-4251-486f-a079-5b83a9deb551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635f38b4-afa9-4529-9517-ce8e3d29049e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7f9171-37f3-437d-841d-22f8e87b0f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529a9271-e29d-47d3-a630-bebb01c74027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4dae19-49fe-49b0-b93d-fafb5c8758dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3793fc-1f98-4953-9028-5a6db37cb73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3e12a3-59d1-4259-af0a-0a8dadeadea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b3d85d-a872-484d-b493-4cf95a132402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac42672b-68c7-427b-83b2-ab6c586e7637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e253b61a-ecd3-466f-9778-cd149b1d7233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b7c7b2-a381-474f-ab3b-5477874ddb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b309ea-8108-4954-96d9-99e85b120a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f885526-0a3d-45ab-a19e-3399f9b821ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01d1c24-98c5-4656-82fc-15544074d42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13f5319-66c9-4af8-80c8-1dc48336dec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8caa94-c936-4bbe-91b5-919390754f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f804ef47-e585-4c34-a583-7ce551837314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1f00b3-bb3c-46ff-bd3d-1cbce326bd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4abc601-e003-412a-aa40-ca0c1539e804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ed6a7b-fa0e-43e5-bf1c-03bca041d594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21090ad9-e2a6-4077-94af-2d965ac45acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11451cdf-a6d3-4c0a-97e7-510443355e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9043363-e6f7-45c1-8411-c317dcda8fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c382227-f2d1-4320-9a4e-1fadd32c3c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d87d7f-ccf8-46fd-a768-230b223149a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14313e39-bd05-44d0-9a09-ebc5917ad710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cd63fb-62b4-4fc6-9e5d-e2eb111c9a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4aafd0-6ce9-4acb-be2b-f63bcfb0fa4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a51347-d7b5-432a-8d4a-293c53db4d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685ffa64-2667-4971-b51a-7d9745e13dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53211967-394d-4868-9ea6-092691c9ba4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286e9d61-cc4a-44af-b532-8d7e3f7138d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24137d1-01a3-4afd-8a3e-161948f8b8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8722954d-418d-4484-ac93-f308813e7d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96479910-9d75-435f-b88b-e74a3d0bc63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb55192-e8f1-4c25-a855-ceae1ecd7d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13560baa-5c8f-41e9-afc3-1355e4a6d5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8639fb-3209-4e5a-be33-c2ddd13e513d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb914916-0eb5-4de0-b364-6bf059466362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3d1f78-1d8c-464c-bac7-03c5e79d780b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3cef65-c575-4cbd-b344-09f36abc9412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918f8849-5fd1-4039-bfe1-8abdfce6b11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443e4cbb-5e3c-40de-b03d-80e415f6c71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1f697d-3781-4cef-b3b5-b48ebd270aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589a96f3-3b60-4efa-9168-9a18bc96ddc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f712c906-3de2-4f04-be8f-eebb25be1943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731d6aa3-8d51-4b30-a560-3ab927bf51a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae1470f-a2e9-4afc-8651-e9fd84e92d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac09b42d-d9be-43cf-a757-a29f8cf7b586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38476c0-9339-496b-9b78-2a5f811d231a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d72522-9d3f-429c-9b90-b124fe2cbddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717d262f-993a-4e04-9655-d10b65cbe675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56458ee8-f5cc-46ab-880f-0166b780f9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066b4213-f4db-476c-a89f-d773d285b009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779c3c17-07a0-40e5-9e16-8e842244dbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e53da52-82d4-4ecb-8d7a-c324c2ecf2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf721da-271a-454e-8ebb-20bd16383275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fa4727-90aa-4ca9-9392-9398c30bf644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e03731-0e36-4e2d-b4a8-652bce44e0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0bc280-3be0-496e-ba71-70f675e47d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9606e07-6636-4c23-b1ca-d2f07d9b662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0039fda7-9ac1-4c33-9123-8252f3e7e18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f245c2-78e5-4467-9675-c66ff3776d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84cd372-98cc-44e5-acfd-1b0a53175c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3654de62-b0f9-409b-97ff-8140c630e764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23424f0-fbcf-4fad-aacf-0a1715410704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4319dbce-c4b9-4dd8-b2e6-1c3145cb05de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c7eb75-323e-46df-b503-7a20987f5c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad1542b-38f5-4cee-82b2-53fed9ca249e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fb2287-8538-4e9d-879d-ea4a337c61fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d6f30f-d53c-4df6-8e66-33b724c978b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5422b0c-5c17-4409-8e5d-77d8a844b72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670c77af-970d-4994-b281-877794ff1f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6da220f-12a0-471e-824f-6fdc6c4378cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08aa208c-0793-41c9-ac66-4beda10594f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c6a900-85b0-4a62-b31f-86f3ad7b9bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b58d2e2-c726-4f04-a846-219f046a566f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a595ce0-e66f-4144-80a2-743b03f6056b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c7a0e6-fabe-4d68-a656-680149879371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ae5af3-d02a-4e2c-bef5-52eed7aebc32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e5d18-1702-4fde-bb4f-77e3bb92dd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01cf211-76f3-40ae-9404-7431db521564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b146b99-3f66-43c1-bce4-84a70a5b72e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f053850d-af65-4862-a92c-b3b006b40c3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21eea12-59e4-46a4-b22b-18c7dc8f5877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c3d1a3-8bea-4d50-a2ec-9dfd65e57516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f8f62c-f0ee-4d10-a388-5d016d834a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcd569e-7cfa-495f-b7c2-b8b3d468b44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea558d3f-fd24-4af2-af4c-bfe85d7c1b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef80edf-da29-47eb-85a2-022efcb18447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff11c68-ea28-49c4-96b0-31864a5566ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54de6a55-7184-4d63-b67c-0c71e9d2c9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b80d34-1339-4ca7-a077-f999bc9df3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12739942-ede8-4277-8a46-bc38eee9314e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a41b28-1904-4b1f-9693-69ac371dd47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01afeb6f-f4f1-4c18-8ca6-4f1856af1300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8542a0e1-7762-4edc-a79e-8bf21a42b967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9001d4c-0974-4181-82ac-460342a8d527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2766e2-ba8c-46f8-afac-dc587b0cefee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278faf07-f2c2-43da-a0b2-919621f6c551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ce76b5-0da7-4b0f-875f-454d59f82018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6e95b4-c1d4-40e9-a8e5-48dd4430e2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78443491-e9c9-4ae3-a745-c8c1dbca2a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e16f82-c016-45d2-833c-23cd2aebd670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2704bb02-fb3a-49bb-9652-77426219d0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ea55fe-3b33-4f05-8d51-b3dc372956f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0ab053-1fa9-44cc-bce1-933e058fe371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ced4d5-ae21-41e4-805a-be25d7a043e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece9381f-dd31-4159-b572-a96cb9076994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2d89f1-0af8-4c61-be05-4ce7fcf99076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c3d297-df69-4bdd-aa27-984baf5c0828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978759c0-66cc-4572-9403-f07a2a96557c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a175143e-5424-4043-8626-3b0acfa693cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299f35d5-e0fe-43fa-8666-f3e249032ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dc97de-01ac-44f8-bea7-1c5a5e907c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b984c9-cb9b-457c-803b-894dc0d7d5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085a4f8f-028c-46bd-9fcc-8499bf474be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4850844-caf7-4a06-a48e-ebba71c3e309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2d8046-0cab-4174-8e60-ecdebd781af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cca526-e67a-497d-89a3-ae28ecfa1861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1300a6d-0d70-4e8c-bf4c-5fea8576d46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ff4a52-e812-41d7-bc28-84e6dbe22bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328c63d8-27c7-4b11-8201-257d7991d441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b43f8fc-68a3-4ed0-b648-1867b79b7792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3f588c-c465-4d56-9b75-45352a0913a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c67f6-2f5f-4e2e-b12a-64c05bce8772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d18af7-2924-475e-9a6e-8f43fe80d071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5faba1bd-7641-454c-ae57-99f5e6b84a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311b332d-0ced-4824-9e92-f9b1a112627e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b91d2db-1941-4a2c-bafc-bb723073968f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b954b3-c18c-4731-afc7-db1eb25cc1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f12f618-6746-49a6-a6d5-c88260beb3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9d55cb-fcac-4e6e-8406-5b60bbe2bb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aebba5e-15c9-4699-9752-46f1347b250f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3b8a3b-594c-4a70-bf14-4cabf392f350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb23d2c9-c40e-485c-adf7-5f62a4b23458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c72ccd4-ecb2-401b-af27-a240cc582e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3079f146-a89d-4cb9-87eb-33f2a3fce5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20401a1-1a29-4503-b538-cb0f55f9c18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3b112a-4d98-4cba-96df-2c5b696ecc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fa4bed-0528-41fe-8746-38c52011c954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f951d833-3413-48e7-8862-f51a99596b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a627f3d-1245-4b4e-ac86-08c19f19156a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f0bbf9-22d0-4d0b-affd-3bf34b8ea45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafb6eea-3da9-440b-8c9e-873fc2292f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2562b3f0-0df6-4fba-b1bd-d0a3dced9e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb1fb19-8ba3-4346-a833-b07c0bb99715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2281b74d-67a1-45f1-9788-e4c205ee7b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0cc4d3-b935-45e3-91c6-36fd7da141a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604bd95d-8349-4c37-84ba-122ec4241691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cfd7c8-9a5c-4893-9771-9c7fdb55f4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad267bb2-c760-44ad-9c41-f115f79ee957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daab58b8-f645-4817-b356-8153b7919082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8045ef40-bfb6-40ea-b9ea-84d8995d6e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671b0145-147b-4c3c-b85c-f661eef9811a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbea1f8-804e-4c90-b38d-af70f2972c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed094ff-7fb6-4a50-8295-386c7d79cefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ba6903-b9a8-4cca-906b-fe27504a54f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b5d82f-f8ea-44c0-ad23-41c73bd5b6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b417cd74-23da-4d74-b68e-4205232402ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ee20f6-343e-42bb-8d78-bbc802e890ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e45d41-91d5-455c-9640-ff8caa9a60d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96da8b07-bd56-4223-abbf-be020e264986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2318d7be-3222-42b7-9449-9f83f475c740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f594dd-88db-492c-a645-067c5e0c500f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e714729-dcee-4946-bfda-7bfca31e0b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e1cacf-e6fa-471e-ba81-f71cbdbf6648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17346209-7830-439a-8646-c01b244ea6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48ec084-3286-4509-b1d4-faee1a3fea21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3d40b0-23f2-4230-99c4-b1444d0f915a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f8f12e-eeb6-4b86-9f3f-38a02ac972be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80e72c5-0f82-4a56-ba81-4772eae08298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c39804-aee4-4889-bb26-5dc8dc598d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95db6c97-2474-44c2-9edd-46b1f8be0460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01eb80b-334a-48ff-be31-68fac5182e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf99507-d381-4128-a116-ae06a68995cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b6acc9-4d62-4cec-9860-ac16821528e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe73c75-88cf-4d1c-b413-f43f9ddbf605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706345f9-db3d-4032-8bc1-dac2232c15e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fa0cf8-7534-4af6-b5c5-6b4ec27db102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58784384-823f-4ac4-97e2-99925b76b503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf74b0f-db2f-4503-ad5b-3269d3d62fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899ab824-894e-41ca-8f7c-7e9d00ca4d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2965c15-1a1f-4bbb-8e1b-bf2078947c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b592b2-6ed1-4f8d-aa6d-1e8016b1059c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4232338a-2241-435b-8170-4c89d1e19a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d25bdc7-dd9b-42e1-a3df-eb24b669e2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863f5b88-5b71-4833-bc35-0aa09dc320b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd699ab-351e-47ba-82aa-24a0842ece89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b2a721-26cc-49a2-b4d0-5fb2e0b53972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22eea3fe-60df-4f54-afb4-ba9e7602a312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e5dae6-e3ee-481f-8fbc-27dfcfaa4961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd643e9-efb1-4a96-a986-e617f7ee41d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a92a782-6865-46e6-9889-ba165347cb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cf1b9f-a9f2-407f-a25a-d8b15b834119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583d01ba-e9b5-416e-9fe0-e189fd397a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381cb7a2-1a09-4314-831e-135228d6d1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939b9e01-e5ab-40c3-8b62-6296f25b3f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1f5109-b4a6-4477-8557-48ac7f5b27fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6408254-a9f3-4179-b2ca-14959cf08152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe02d97-2011-4f91-abd4-09a7627bf238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0aca3c-0d9d-45f7-ace1-7216fa042539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e452e8-8411-46b2-8a25-b8c9bfe70e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cb84fc-1e4f-4d5c-9ebf-6da0afc2fd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b8011-1a78-4897-86b1-80f1b3a7c942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.220']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994f9921-48c6-4e1f-b79a-3c507389d0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eab2e9-5971-4ef8-9c09-351e60a42b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91696640-576d-45d2-a830-0af0c0361766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb61fc31-93a2-4a2d-8f56-08c9f1d882c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac50bbb-1b23-45a6-9710-0c20207566b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7351c3d6-34b7-4c14-ac9c-627357f75884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a91b54-0eaa-4a35-878a-8ee89a7b337e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e50d3-667d-4762-9b2f-91209191c1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e302cb-ac81-4357-aab0-d46a0d2635cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c6e124-8f12-46bf-9812-b249c1cb1df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb2e1f7-88d7-4915-96eb-1800df6febd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aeaa89-3e31-48b2-bb9a-097e0664a6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3afea9b-3d9d-47c3-9295-3946dd0be7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7a29de-e3ff-44f4-a4ba-ec91241886a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077192ad-60c5-4013-966d-c15fac9cb1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1684fd-bc3f-4bb1-a532-679ef15db6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddff1f9-e214-4d9d-972d-e87b96570da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d65d88-a773-4d32-80d5-e4833bbdeb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198a7a74-497c-41d3-b12e-8526ca389061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b5da45-eec3-43d9-9bd6-553bc8d21d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdc2d0c-3da0-4cc1-8b1e-a8eaefa8c8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90047e8-69c5-4538-a081-9e7f93e4f15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb77675-9cb3-4a86-83c8-6e09a93793b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9568b1ea-aba1-4187-b0ca-77fced768ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96964e5-6e06-4687-a58b-a9b5fcb37a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cd448e-a704-46e3-b71d-00e80c858d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27bdd14-6dea-433b-b977-b0254c0cf963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e9f394-8cb0-4797-8852-466b0194e69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcaab78-831a-417b-b419-d08cd46604aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929907d3-e90d-42f8-ac31-d9a64f5c9c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c28e61-29e4-486a-9b2f-b685956cdc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62a0202-f7e0-4da8-adc4-1eed4acace5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd250737-fc9c-441a-b223-fe9afcc5282d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b72ba50-0059-4818-a059-97e655c78e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d1da38-21be-4d30-869b-6d4760a29597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd838df1-9950-4b7e-b18c-e7d8ba08a6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef426c2-2898-44f5-8d6d-ae1c7392b6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ed3d4e-31b9-4777-b784-4faa798319ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c60721-d45c-47e5-9128-7f42375f11ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac7ca15-cd4f-46e0-af4b-8e165b15a290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d90fc4-630a-48e5-9a66-a166be9aec4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb0a359-c553-4fe0-b029-761ea0eb4ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f647ecf0-edc6-4061-a416-9cefda8754ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad185df0-4f21-4de9-9f60-1d3e38494a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8736b0-770a-4470-b394-9e8a95164efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d793d27-d32d-4845-ad92-84e847c6b65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6777f42f-15ad-4e78-b7b5-524555278379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9cac47-1f59-46ce-a5a2-fd55bcbadb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246a9f31-0e3a-4306-871a-2cbbbc9c70ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1b926b-b3c2-40d3-b896-bb0245d945eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1891e98e-d87d-4061-a39d-fd97e13a08b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa2267d-3967-4b7e-b0a4-b3712c8bf40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48e5f33-f569-4130-92f6-456b8c50e900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1c772e-10a8-424d-a6be-40b6fb81f712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc16a09-fc8a-49e7-b092-df8e7810cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6481f033-5ad2-4f37-a869-0db67a31990d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c594d22e-787c-4717-8838-0e3786bd8f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08daf7ea-9d50-49ee-b57b-894766a64dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b749eeb-02bc-4cb8-b074-6c7cfa4904f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954377b2-e600-4458-990b-479022496ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baad1990-9092-4cc7-905f-8c07849c2a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1ddf9e-3392-4338-9a61-58ffa0bf3e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b84814e-4371-4b76-888c-16bce4ab884f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb7ea69-9f50-47bb-bd67-a915e836c5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61b33c1-147b-4129-a625-da16e9fd091a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ab5078-02ad-4bf0-a1c6-89fdcff88f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bf3643-f886-4eca-a1b3-f0cb9b4f5b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59911e3-01b2-445d-8836-3cd174e1fc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb0c77b-f4b1-40b6-a210-58c5c13d0117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed728901-d9d6-4858-8843-a084245d7c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92978825-ed29-49f7-b0c6-5acc9188b32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e76c22-46d4-4ced-9d2c-ea33252416ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef792b75-192d-48c1-8f90-8dc4b73e29a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c6afe6-19e0-4bd9-b81f-48a6d98170b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dd8bec-7ff8-4b7e-bda1-73654828dcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec331b3-21d2-4ac0-93f1-508e03179986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e850ed59-911e-4d28-9950-5e9db855b1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200a1386-0c74-4ed7-9f09-d8ad96468e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f802316-2506-4e25-9eb8-11d6d2179939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcca7a3-18d9-4c48-85b9-07f7a6be2cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6488fe-1f5a-451e-ade4-0a2a40e5c559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c221da-af4f-4091-8022-0c2ce3ba162f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb49060-5bd4-4d82-bb6a-81522cc92a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8330709-34dd-4c45-9ab3-f1646f905e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12e7935-ffbc-4cb9-b171-485936c524ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9e460e-2473-4079-adc8-1f72ef59919e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c791ffa2-043d-4a51-9ab5-e28a59aa522f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaad44f2-8a4d-42a7-ba67-bb5b5785ec2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c057a77-bf2b-4a75-9216-1c5575c7006d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14be8222-6595-48cf-a926-9985c9b993bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d91c44-eeb5-4a6a-a786-c6e34754ffd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3943f3a6-82e6-4e88-9f16-27ad654765a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da4f428-94ac-4771-97a2-c13f1ad0d62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf6b8d6-b24e-41bf-a9f0-a75eaa9bc6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820fadb1-f2e6-43f4-91ae-7b4cc93b833e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bde192-7ea9-4def-8e46-187c02306858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaa4e7e-b3a2-44f9-b03f-5e7077174564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa483c8f-1991-442e-9389-ee17805299c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee621313-cf26-415a-bc7a-ce0bc2eadb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0659fd1c-f075-41ea-b8cf-479a302764df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554ca3b9-02f5-4b91-aa65-1f730754144b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e22a19d-63da-4ade-8b7f-e0e9d409180d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193896fe-5f8a-48c0-bce4-09fe430dd72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deb7338-36e6-44dd-becc-bb258efc0a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799574f6-32f6-4ab5-8b2c-8f6a7ba836f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e144b78f-40a2-4129-9214-89ba3cba01db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.133.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d72fb3d-aa8a-4329-8997-b124e134b330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.238.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a3e75c-4771-432b-be88-bbcd1f4ef6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.114.218.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43423a75-dd5e-49f4-ac50-552ff99384fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.203.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2265619-82a2-4e61-b6d9-332e95668752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656aa6f6-47ae-4802-97fb-cce43dcccc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a808bb-a29c-4352-8a6e-7858c7beb0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d28121-a77d-4534-9a64-51e58290de4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b8b9ed-ba22-4fba-a3bd-5d800df83818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7581725-5032-4fcd-8afe-29d9dd34f6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d992df0c-a93f-4405-b059-c147e4359bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebe04a4-06fb-4efd-9cd5-617a92ffc940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37383bf0-57f7-4602-8b91-475590d759a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43229ae2-c625-4856-8bad-3430a497e89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a01c91-82d2-49c9-9465-0013fd145e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e66ddb-f89d-4003-9394-336305be7410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201664e4-79bf-4124-80ac-e261cfae7104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a350d94-4b4f-4c1f-b243-5790ff8448ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cbffa1-2123-4f05-952d-40d5cf22dd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f893fb1-cacf-414f-9c8f-2e45cd9d12b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e50ac-9ef8-41a7-9135-bbc3f37f4ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508f53ed-e3bc-46cc-82a1-adb851b80f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.90.30.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b444de24-fdbf-4b30-b076-8313af59e20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.244.6.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0f1a18-a9e3-447a-820b-78099436c708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a29899-a7b7-4bb5-991d-ea44ab9ab2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88aa1cc-dd85-4332-9b79-ffaec6696a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea37d03-3af8-4d81-8c48-40625df7971d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b516e0a-94ec-4e01-acd8-88f0f98ad1c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8794e536-491c-4f7e-a4a6-f62ce71c4891", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffd953e-1eaa-44d7-bbb9-d7966a48acdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd7e166-4060-43b5-a523-8af2359eb2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1b6ef9-ccb6-4ca5-a862-efbf7b39f1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804bc51e-ccd9-4500-a420-1ef9de5085a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117fecf5-b390-4eb0-8340-2e86123a7304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19237357-9ce2-47b4-87f4-5fcafb65e773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214d350e-cd48-4a39-9719-4a9dffd90f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea089dcd-e1fb-488d-99c1-c9346f5be57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5f2c34-3207-4db8-ae3d-e82740e9227e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c755e96f-9565-4544-a149-060971212f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b14ae5-0c28-415c-aef9-1fbeb93b5991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e1ac89-0afa-4a2f-8b7a-2e65e70dc27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d3762a-8947-4df0-965b-06cf077ecaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cd7d0b-19dc-466f-9d62-1ad86403425d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f0b08a-d053-43f1-ae34-a5fbb6cf8e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e88df7a-20d2-4765-9f3b-521be6061c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a10739e-12e5-4d19-b1d3-2347f7a145bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b4cb5c-e90d-44d3-ad47-4d0433cd9b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e37b6e-ec0d-4349-b53a-ba24203e126f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec92fe4-68c8-43d5-9328-7994f63d878a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44ec95c-b799-460f-b125-bacf0b63e4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b977138-5685-434e-9a54-f80b3d36ebf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f20efdf-f5d5-472b-a71f-9179f54556be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b729872-9222-4483-94b8-825d8a3b9b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b26700-eae7-408b-ae34-72a5d2b2dcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10947f14-a09d-4183-b266-db194031782d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e11052-f80f-4974-909c-a2936f595d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.88']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9788b642-87fe-4da1-a3b0-9521ee55cbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94a005e-9c0e-48dc-b735-2b72a8627c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3194ea-dcbe-440d-a8b7-f9cf99c773d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb1c410-94cd-4ecd-8ec5-ae785df87eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8eb59a8-1fe5-452f-9f68-937dc857cc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc71924-bd9f-4433-806e-28bfdc615746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6db239b-75a4-4d94-850a-5e24a9ffa2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee1d7ca-32c8-47e3-9c61-e63a5ff96538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afcfc46-239b-4f69-a5f4-2972d4490af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b998d77-b1ed-4b32-a776-1a8e7f11d52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b0543b-4553-4b67-8230-4a7b2c80001b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c393d4-5e5a-4f58-aac7-7175d47a4a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2450b3d5-52af-46d8-8ea9-7bc8dd059916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fb8458-946f-414f-814d-1f244ca02df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48031706-247b-4144-a4fa-bc9ceaad3007", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.104.0.82']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b45fd3-e889-4213-8215-512132b3e8e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.117.225.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef115c7-2610-486a-b1f8-1df7081ef221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e48b675-2a9b-45c2-92d6-d8a57fc00a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d9d148-84d7-4c91-b7c1-cc3bc7840d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e612f0ac-656d-4694-b9b9-a9f7dddab0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6793beac-292f-40f3-b9b8-1326f04e1d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3215ab30-3629-4f46-91b4-d74d99a34810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159a2d35-7f79-4032-8207-d84a0a2dc466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.238']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76484cbc-0755-4b23-b012-90df96405242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.246']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54754e41-bb54-413e-9907-fd7b6bca1346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4424a60-d516-4696-be51-742dffcc8ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396586e9-c158-4a2f-9135-9eec77a932a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64e7d2f-ba8d-4ad5-aa1c-b39ff5f1c58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbb0a59-f161-4ad5-99d1-e81fbc69adb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c454dbd-1549-46c6-8c28-37e7b23155d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b79b939-3063-4ae3-84c6-045349903a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2162ce-ab12-44c8-b722-e80cf0737bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb814ae5-d1a6-46eb-857b-8a2600f598bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a54169-21c6-4081-a1fa-6bbdef2c16fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.138.91.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff5e28e-e2d6-4653-8d75-a817d7fe9981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.124.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71b32f1-33e3-4f77-ac11-5217bfe6ba09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.119.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda4f5fd-200e-4e94-b6ee-53e35c5bc9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.86']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243dbeff-b53e-43dc-950f-e724fc76e0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.207.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac247572-a79a-4306-8fb9-db5a97935e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a1b986-0445-4f75-967e-57a90f66a859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.218.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ce6ff6-2168-4cde-bce4-af8c5d3e16cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c24e076-5748-4770-8655-d20362623ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5908d7b-26ad-473f-b629-f2dc5dfc099a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.64.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce029b7-b96c-4488-9d9c-8824f89c6a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60581e9-833f-4cab-8762-785c2c67d3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131fb432-0bd2-4a86-a1ab-6fccf8d4f19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea0cd50-765e-4fc2-8e64-f8247daed1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.136.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1dbb5a-9508-4ee6-ac57-6bc4fda0b4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15122dfe-883f-4808-b838-49b4446015d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.23.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981589cb-900e-492b-a15c-e465f033513e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.99']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301f7994-6fb5-4527-9405-79ba58db8001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8b4777-6482-4ab1-b878-f13013a5259d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49151fe2-16b1-42aa-90c1-4a93dacf80ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bb3398-3bdb-4982-94c0-9d7522fce866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc5a5a5-3972-48be-83f1-c2c7d9d194d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891d85b1-13d5-4b12-a44a-d7333098b795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5803d7-f047-47fe-a0d7-c63947f1d9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1083b34-c26f-489c-bc80-6e5119a1a89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcc584f-a86d-49e6-8c04-d66136b6a492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.161']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf15cc7-6640-4f54-b1f9-d8cac29da7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0435c2de-52e3-4f33-90ea-7e902aacfd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793b9cfd-b84a-450a-94f7-a9f4dc1b2a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.28']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9cf376-9063-471b-b3a9-31c9ddd99744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c12adb-1ca8-4b3f-92f6-809a4668fd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.164']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eddbb6-1426-4b4d-a549-cd9a39d9fc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3a6cd3-2700-4115-8170-2e0510bc1475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ae09ce-b1cb-47f7-a4f6-1f9f4b397079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebef55c-7499-490d-a37d-24f35255c037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddc3dda-73c2-446b-b1e6-82b78e2ecc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413f5fbd-05fe-4eff-9f5e-94630e10fe99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.236']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7577bf32-348a-4b51-ae91-f883c043f484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.143.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15283cd0-3593-4826-a530-a6006342ecaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.103.63.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aacb883-d6c5-487c-8e4d-47acb19fa0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.13.68.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956b9c9a-b412-47ad-8496-b8abd59d0996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c5a0c8-e602-4976-b95d-86e8692885ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccd296b-2ec5-4768-b65f-45848f32dedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.58.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc91ca5-4144-472f-b37c-e2e1a4bc05d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef84424a-efe5-466b-8e4f-01e83be52708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd53278-0b37-4dbf-a521-381ee893bf47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f0a18b-ba9a-4521-830e-6f551a4ce544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b603dc-fad7-4496-940d-d90fc495feab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.253.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aec59bd-91df-4ece-8720-c3eb0456105b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c34b11-f3db-408b-bb36-d574c31df4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2f10e5-5def-41ce-a9ff-dff5460bb61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8de1f6-c564-41d2-96f1-191f2ca70b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.95.194.124']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0750e9-116e-4a99-bef4-d063c76c84c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93638b9b-addc-44ba-98fc-90474292d1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.240.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592921ad-070f-4fcc-b811-6b0be112b702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb192e43-41b2-45b1-8de8-d228f9bd7d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4269c06-0202-4f20-abe0-15e98204c32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226e305b-4432-4636-99bd-a5e125d08138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b851ca46-6aaa-4c51-82cc-774a8762face", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baf79f5-be68-46ed-94c9-6781016b7ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd1825e-e0fb-48d6-ad39-99fae500beb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c3599f-ce62-481c-9bf1-c081f2f89640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.216']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451751d5-e159-404c-b923-0077075daaba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537ae903-84f0-48fd-a582-fc7da567af79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b53f2b-f0f3-4ef6-90b9-9ddf92095050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2dd409-3bdc-4897-84be-8610b10cec8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.71.158.242']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92667dd0-b367-413d-9909-0c8997472882", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.39.86.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1895beb3-810f-49ef-a8a9-9ba85496a077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.246.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696a68c0-88e1-475e-a2e8-d6d86d466023", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.219.248.100']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb83fd4c-626b-48bf-a0c8-02b50fb0584f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.16.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a192d9-c906-4db8-ac46-6a5695a9d2d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.134.86.148']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ebedd3-076a-4165-ba77-bf5c9f7d730e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.71.158.128']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a189412-976c-4478-8599-1b4c1513a0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5700a4-5500-410d-8a3a-f5e7e4b6db20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849404b8-0995-4196-b7b2-3075269e21e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb163c5-2faf-45a2-b6b3-b87f13a15b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.82.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a61fbb-0007-4bf4-9ee3-06f5b43fd540", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1ff019-5309-4771-b0c2-87ed7c7077b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843ef37f-94be-4ab4-8497-29110febecc3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41d2638-33f4-42e5-bd80-c9edafa79365", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc706336-51b2-4a32-958c-03d6147031f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d743de6-6fc3-4815-843a-810a77120f97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc23e60b-9d29-4aab-8ed5-6d7cea7a7578", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9221b9a7-8e36-45b3-b13f-33ebaf78b748", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2360eba-7ad9-4933-afbd-00bf7081d0a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9d9f52-3689-41a2-9184-83d283c27198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8af452-cf74-4e16-b87d-eea88ae6b5ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57450c7e-903a-42cb-9932-ddce925e5bad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef1dabc-4d6b-4b60-a435-ca0c8d2ec97f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bc6d42-912b-4f5f-8a05-e6095cf6046d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c732f8-031c-43a2-9a51-3b224f8b0a50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb1e7df-ac3c-41e0-ba82-ef8a033a4203", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568860d2-e055-4fe7-abee-bebd8ae52e27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3e1827-eef3-4299-936f-dea3309e7d4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb6fa79-3106-4c34-996a-002abc695843", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c825c266-0f14-4f9a-a567-b33427b0bce0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae79ddd-dda9-4a3c-a11c-6a576810ae34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3debc852-f37a-4124-b130-a5bbcfb4d7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09c0e0d-7773-4056-bb34-4183369ef6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b90b97-c776-438b-a9cc-04bf9dee884d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23a8f89-99de-4dd3-9076-6274cb0cade6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d37abec-5021-4e26-85c1-db8b66c4f293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3177d98-f3f0-45cf-81d6-932dae2da09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8882b4f-f5bb-4200-aa6b-c45f508dd3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3c5f11-aa75-461e-86e6-bb33c980fd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c4dafd-b27a-4f8b-8fd8-7a4902ea7e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61df291f-c6eb-40e1-95de-f140164c2d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d7d22e-b7d0-4dce-8f71-7465a40052d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8b69ef-06d8-48cf-aff4-3f34fbfff31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d1556f-9a87-493a-86cf-b00b547bba17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ad87b8-708a-4be6-ba8b-8f529c6a3a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ec9ead-c3cd-44ad-902d-cebe9899cab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b527620-168e-4092-ab69-89e8808a37db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea429cd-0521-4130-91f1-b7d183df0d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e588402-c895-4e3f-a0c1-bfd099e4d3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c530cda0-df98-426f-9d0f-1a3da2fbc875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd9fc33-83ed-42b3-9433-e3386d9a93b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3b3094-fc1a-4aa6-a0f2-15dd0ac4c529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba30148-54cc-455f-b599-bec282b7ad1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f6f837-6855-40e4-b3c2-5532d4b50803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03f9b69-aca4-48ae-8c42-e83880979606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a63a808-b03a-4163-a597-e67e90c62aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893ece8c-ff2c-4cf9-a756-8a547be3aad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0a2fe9-cf7e-4aac-9b7f-1e2d0d2dc784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b386461-a7fe-41a7-8bca-3efef7a6094e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d5e495-e7e3-43ea-aa16-3527f1a65126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f85d926-caca-4741-8e37-205845b292d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c469aa3a-78c8-4ec4-ace9-36b9c67aaf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b1641a-3d0a-4504-847a-ecb0f9ca4323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7774a69f-43ea-48ea-97cd-60e9d1893736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5bf2c6-5d90-46fc-881f-11c279175244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d41625-77ea-4d9a-ac7f-09e01386f096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93435427-30c5-46b2-95ad-50f6e82ff094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458f1bde-ed32-4d90-b9d1-0f8c3c53de97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bed8b2-1354-456b-aaa9-4b7e2efee114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0518ec-4d7d-4d60-8b51-3f9ca4a12c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382df629-1c5f-4362-a762-266d7f848321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4685314-6637-43c3-8133-3fb65bc308c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d77c83f-422a-47c3-a7ca-2f29dbd97235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2207de6-854d-4682-8ab1-c37fd38ba697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f89aca-6496-438e-bdf7-5ae6816d3c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba2bac3-2441-402e-ab33-f0b17a38cc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ac9377-9b9a-4540-83c6-7a1762d7ce75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dae09f-4a65-4c1b-b15a-c01b8fde145e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafd643a-204d-405c-9477-b30ee035c45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8f53ec-18fc-4325-ba9f-d28d653891fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23b26a6-950d-4606-a800-c6af731b7b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d98428b-23df-42ab-9e7d-9034af4a8c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786e3343-dae7-460f-961b-4e78fa30367e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97079f69-f9e8-4515-ae0b-101a3d680a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3688c93-8dca-4270-a3ab-8106ff0d3840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a015e32-1000-4df9-b2e6-fe069b9b3c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dfb39c-673c-4f4f-ad7c-749faf6e3418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c621e3-5463-4ace-ac85-889affee0e70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.240.193.104']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01341b1-26f1-4986-90be-41fad9054225", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.166.40']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d73753b-8f67-4aaa-b30b-ba3281c5f44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c488e5fd-baa1-41d4-827c-8dd317239448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.48.1.198']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bebedb4-90b5-4d81-bed4-44896eacb057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0636d981-57a7-4540-95aa-fd32a8049d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00ffe59-99c4-4ce9-813e-99429cc616cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f7f30b-accf-49ad-a16c-676f42333845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32cb7c7-8f0d-48c4-8d24-945cb2ada3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4184da-11b7-4796-8fef-06217b8a2ade", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe0a8c1-8b56-4e75-9bcf-7c11a7ee35dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4252d512-0e7d-4551-901c-49d2687f0e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44128a1-ddf7-498f-b527-149f3b2bc61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e34834b-0761-4166-a5bc-796f5550d85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da321bd-d0fe-4bc7-8cb3-43618cf965f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2b9f7c-d7c5-4b97-9118-54aaecb31b06", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82d35ce-5185-424e-b707-45605196ec32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440359de-1042-40bd-bf86-e33df7476b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b69728-c64f-4bf8-9fe7-0d71807a4a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17675751-8bfa-48f2-93a3-9bc42b001cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.134']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1169e6a-357b-41a2-a904-54e7a264c8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2da656-8ad7-4607-8ae8-9dba2aafce10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.136']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709e864e-1e89-4ed8-b87e-ae219e3bbf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c9668f-1185-4465-a6f5-fa540de6bf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f99828-b9c4-4ce7-b5e1-4d58d5e5eb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f10fe8e-434c-489d-97be-9134bd44a41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53139894-af42-4110-a53f-a6e5eec06181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.142']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf7411d-0b68-4789-9905-f001cd26afa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.158']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186652da-15f3-4997-8d8c-74549b0e3759", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.93.56.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1292e3f5-fcc3-45b8-8a28-a9a1170a8a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c56b575-c555-45bf-93c8-13b21b3c45a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fb67f9-a6d6-4048-8907-97a85d7d7dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4441a1a-69ac-4071-9ee2-3924dc938e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aeb9eb4-3446-48e7-9731-eed8e8840bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc94de6e-3393-44d5-b3b8-5cc4ac821889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefb194f-cf84-46e8-861a-92b53b1647af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92dfbb1-c53d-4fd6-8df6-f18274871f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3b45df-87da-43ac-8875-9f7d8a87eca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fae93f3-5ece-40fe-a808-1ed509228121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e613307-36b2-4f55-a951-14fbd74f1a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91afba02-fe97-4d36-ac8b-49f7f396ebfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f864865-dc26-4409-9d2a-47822b66cd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ba9e9f-a7a1-45ca-b2d2-e2398aa72369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434e426e-4385-4d9c-b7c8-4eb41f49cfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173c4a41-bb7d-4a28-be2a-4f6db30be80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3badca7b-d902-4adc-8442-7cfc1b08aa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fb193c-0733-41d3-bfaa-d7fbcb63a8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b965e0bf-3c97-4666-b516-b0628c35e880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a02b2c-a445-452e-8222-cd33942f9ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69eec8b3-f77a-49e3-9a4c-bf3e9a02ec3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08fb0e6-1dcb-4915-8ad7-3bbe7a3c7348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea198c0-f65c-4bdd-8d16-8e41a85a0644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc5377f-ca7b-4e56-a242-6d972e46809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1541f84-6a71-47f5-bc7d-fe7408082d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cdc853-6085-46ad-9bd3-a8bd003dd409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb39605-bde8-40cd-b9c6-cf1d83e28fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192305aa-b75f-4cef-8fee-6768a6b7eb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0612773-4106-4110-8c4b-a9e633ec1811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f5a11a-a26c-4b90-b918-48ce188ea387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746a2c3d-9f74-44ff-912f-620798c85795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f23828e-974d-47a7-8db7-768f7c40ac69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4b76b7-10fa-45fa-8ce8-4694226b754d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2f2548-2837-464b-a3aa-325612e62681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5fccb1-b0a1-4ee9-a5b5-24d1553004a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947f89d8-402e-4f2a-8781-1064a89c6e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6ab806-2490-4b34-92b3-c7b3d54d1a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ced1d9d-9ace-415d-b852-440ac6e314d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7224100c-dd61-4d7e-bfb1-8d47452987fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ecc090-e836-4d59-b44b-856fcd4ba899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d493c6b3-1c56-4820-a1ba-8adcf8512a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9d5e6d-bf4a-4d76-aa18-066217993cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af0cab9-f7e8-4a05-bd6c-3daa9fbf5f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa72a725-be63-4bd9-8909-aad33a25899a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d97875-cf8a-4af5-b5ee-fbe8642ee56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260cdb65-0f76-445d-9026-e70ee37f7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b844681f-098a-49ac-a85f-e32a6de42d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95cf351-aafe-4fd2-ab2b-6636dcfe2994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca25752-4762-4ca5-b4ad-4663b4595f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc87874-add9-41d9-81a8-131ad16baaf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beab2132-a047-4042-9a77-8b7b7f1f0eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.204.209.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f511fb47-7157-4a6b-8bec-6d2b3f78ac1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.205.197.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8fe6a0-c2f4-4e25-86e1-667a14910c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.62.94']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa93ab55-9538-4352-b9cd-8c4e891bbc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.90.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dbf05e-a327-4999-8792-dea91b11c821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903bc7ee-ce8f-4155-bdd3-3c13d840747a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06e113a-441f-4e58-a887-6ae80a4194f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f5f0ae-760d-4db7-a086-e6eeab997fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fec0ca4-9a85-4f69-a256-9e094f5aa2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28315c7-d693-46ab-83f2-7497385fd6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d213aa-3376-41ff-9ec4-19f9b39519ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe14372-f6fc-4184-8c2a-9889ba0517f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f859fc4a-7978-45d2-9649-46c4e297675b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b8755d-bc29-49ab-b0a4-b308d2353298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36f48a2-7889-4f78-9243-3e7800f0aa87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71429cc5-f62a-4f64-83ae-f26002ef4d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0094f73-7df3-4664-8477-0439a6ddffc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c5c29a-8f56-48b3-8101-547f04610ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ea7c4f-4f7e-4d13-a113-5c36a262d1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649d027e-cd69-40cd-81d9-e7f8a752c887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10719681-fe30-4b77-9c23-978055072a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e9e656-b5c8-4cbb-8d5b-b1206d820c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb7850f-bc32-46ae-a4de-8a9080114718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8cd894-439e-4eed-8e2f-2eab99f440f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7976da-b851-482b-998e-07008c9dc707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97595ebe-488e-43c1-974b-0f69d55e68bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80785c0-3577-4b08-bd58-655ae8137ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf5ef23-74a8-41de-a557-001ec383387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb8cac1-b6ab-40e8-a6f7-e0a7e7cefa79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7563cc8b-f734-4253-a2b0-d91fa9808596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb076b2b-f368-4f0e-9e81-33e8a9e8f782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb6728a-8d52-418b-b47b-04102d72f658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73bf4e7-2f1d-495d-b177-1690825a0f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c89d204-9d4c-4ff9-a63b-a30f6a36a7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba9c684-74ba-420b-aef2-bd92ace9ec6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53671ad5-8fea-4b9a-aed8-e025db57c992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdeab2d2-24c5-4067-8587-828b8283d3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07ff9af-d6c2-4fe7-badd-a9bd83ad7b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b15b629-5546-4c45-9e25-41e65716807d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ad398c-7707-456b-980b-ad395d4ca874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09609a20-c02f-4e7f-8973-5b6818694961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091ee44b-f7d2-464c-a19a-d2d966fc4b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afddaa59-e6df-43b4-84d1-967da6a05c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5013ed6-f9ed-4212-8616-3f4b4ff05e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cfc5f8-9226-4e8c-8b68-3e065e05d1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a41457-feae-42e8-bc9d-27859613e8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571e7145-c566-4ce7-accc-f912258c82b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1d7edf-b695-4832-a84b-93ffe4156359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16713d3c-7f8c-41f6-b1bc-4105440dac62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978b7c61-b034-4b08-ab54-f887dc919cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d8edf4-adab-4930-ad72-08bb758fbe34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a99981-fdac-4000-844a-30a1817a6ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4cb4a1-de17-409b-803f-0f51eb2c0295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494c5988-7911-4167-b3fd-62fd4235e780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbeafd4-f162-4bd3-9f7a-29dfa8228a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e95fa2-52ce-46e3-af73-2286a03314b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032aa659-5749-4062-af54-7a1786e5ccce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1b862e-8a41-48ea-a44c-192c71e5f0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a1f1e9-693b-4bd8-be16-19291ac89114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acb5a5c-50ed-4e78-8c1a-a13853c43bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4fc951-1594-45a7-9524-c91560cbe634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed4f800-43bf-424f-a28b-dc9935f9fbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8a3e5a-dc09-461c-b4d7-d893e7c88ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92edd6b2-7ca7-42d4-a108-61303ff26caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0348a8-c6a0-4133-8854-c43bad029dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d481459-96b9-4cb7-8cca-12b07683e096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947a83b1-43ad-41f6-adac-3aa3195d9325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982df406-660e-4dbf-a680-6b42b65dcf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61edc36-3b8b-4816-93ab-93f2f99eae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c52941-f400-4b2c-901a-7974984c9990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98259c1-cdec-43e4-bf21-d37e27996124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2d3f85-9846-4332-91c9-d8f40e9575db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfe5142-6054-4591-848d-e5c494837aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65eadb30-d77f-4076-a27a-2457e635a128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8129ad-0264-47db-963b-369f0f745b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8598d6-c249-4414-ac36-ccd15143f701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9b628e-546d-4fee-88c8-936b133a9984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebfda4c-2bb9-47c2-8a6d-a246704c9076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e1258d-bc3e-4b6c-a1a1-3e6d2052ffcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdaeed36-d92d-439d-93e9-f832eee5d2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9494e6f1-fa76-44cf-a70c-8ff38e7e91a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5502c1d8-b0d6-4081-aab0-63f6b4413eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4cab59-5445-434e-aca7-361dc5f0ce85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bee1bdc-d695-40c5-bf62-242661e52b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672ac6c0-4f82-4ffb-a5eb-afbf4988b472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e20f87-d399-4133-b759-3c8f05016f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a879d24e-7934-4431-9107-c84f0ff91a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b35d10f-9dea-4101-9cd7-ce60c84feb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b466b4cc-0303-49bd-a4b8-36ac0f50f3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b14bcce-0964-4158-9d79-90ce5d36b328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f747d6-f151-4a5a-9bb6-f01581f97efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a6455e-6a9b-47a4-bdc3-3760a4d14aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ba9c79-6142-4309-b799-3903a461ff2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60414872-402d-4a15-9d3b-797827733ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9b3118-1a55-4b6e-bea6-f5da699b1073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1f3fc1-7e8e-441a-a0df-11b2c23ec60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c898e3b1-42e9-4573-95f8-182fd06e7e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c945f0-e22e-415b-ac53-4a5dede134e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2d0617-518a-4eca-876f-a381646f8f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312bff12-ceba-4d2a-93d5-f98e7771cb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf6fbbf-b688-4f25-843c-6834c7db8cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2967aae-0384-415c-80dc-f3b9170e23d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec877840-809f-4331-9784-852c5a34d015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71349cec-e613-4e67-9e30-0f4372408388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60161b2-551e-46e6-a880-fe0d7a177f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b386f61-50b0-453a-b323-647e2d7c8d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d064b467-f5a1-47ee-89f6-2fc46b57538b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b6c625-6ac5-4f7b-8825-01d5cc006896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0143ff7e-2e57-4422-864c-3a9e3a6e208b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef848ec7-aff9-4d68-a597-bb5f88d11c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d47c3d1-6702-4029-b333-312233c691d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c902386-aae3-460c-ada2-7e00c3a9c93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de9d94f-9529-4fdd-b67d-2fdd39f4ada9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8315bc-8ee9-463a-934d-15afef80b904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c74882-620a-4af5-baba-22eab54937a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bb95d9-8a4b-4fe3-9254-7f6825efc5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350c20a5-6ebc-4ef5-9d53-f0f975fc7d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af20ec1-d9ee-4ffb-a3d8-ec23b647af3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8587be-001b-493a-898c-dcf6c436924b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364ea7ea-6b25-4a64-8f25-f7b6c7d358f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fa592b-642a-4abe-94b1-3575fdd1e301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0f8cf9-1fef-4a94-8287-6054844ce2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bd95a5-fe2c-4ab0-80ae-262cc84c39c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26c0932-d511-4c48-a0a0-2a7c053c02b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89967c27-54ac-4dd3-b629-3171b5889ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552c0241-fb26-4229-8447-e889589f120e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1289e81-0ff8-4790-badf-888694034b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cea4a61-838f-4f5f-9821-720d2f0080aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9b4c84-7300-4637-9f7f-c6cd5375b8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7e7eae-30ba-41ba-8226-836d91956f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a035e31-d5af-48d5-a82a-4ef6e0462198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1d3f53-cdfd-47d4-a706-f8c03808493b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdc0c80-08de-4f1b-96ff-dd6fa670e276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92ca69c-e2f3-4642-8260-ac81ca529feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef0c67a-8874-4396-9753-08f39ec72374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adccfa53-42c4-485c-82f4-e8f2252d4781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0fdde0-0ac7-4810-8ebc-e5e2b5034ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95667ee3-6a4e-429a-9d39-8e97321ed559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4e4332-1798-49f6-9bad-0ca8c206c06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8255078f-f61d-4793-8a7d-d5f34f4ccd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f8d43f-b844-4d18-85ee-026aaa27eb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.197.114']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696d1f10-dd22-444b-95c3-e109aa975e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.153.112']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69791a3a-ed0d-4db0-aeb1-6ac802fa6b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bff9e3-43fe-476c-a61f-7ed19de2deab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd2332a-e811-443f-a155-a137992175ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93943b2-273e-460d-829f-913b0894764d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f00c817-c49f-43fa-b702-eb59b9036399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.186.222']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae979f2-fb5e-40f3-9b38-25e5379ffdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.36.151.194']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3513e10f-73f8-4aea-b0ee-36f9018d1625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.60.190']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ff20b7-a0df-465f-b0e9-946fa193a706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38706f14-6289-4f06-b25d-9d848d13e385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.178']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1589769b-f2c6-4c38-8173-61bd0258aa26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e079ba26-4050-4a49-aba7-13a1da6dc91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400bf627-9e34-40de-b8fd-d3ae723cf89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.126.26.6']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573f6cb2-27d0-4b35-b68a-4ef8a62acf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195ce24b-775d-49fe-acf1-93b4929694d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.12']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c25314-efc6-4d55-98ab-7f7c304f67c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3435acbe-18d8-476c-b3ba-5c945c862e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.192']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75305580-9d42-4647-bca0-07570d71b847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4261fa-bdb6-46ed-a45f-741cf2342ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d87a16-2a71-424e-854a-e94ce1d85d26", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd848ed5-1809-4980-911d-f4b0b038a86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d99b2b1-5b88-4608-b111-e9a892193f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d48a15-d677-48e4-b81f-5babf55a8033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.96.62']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efa55cb-735f-447e-921a-e436ba335067", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.184.10.115']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21569a4-ca88-471d-8155-d9f1e2007bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.206.87.50']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d82a89c-0de5-4908-af57-9acb5770c176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47a77c5-2618-4f22-be5a-243b60ebf1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.130']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1d204c-1c02-404e-a41b-bf7dd6113468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba4c8c1-4a32-4195-aafb-3ec99ea9b1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6312d89e-83cb-4422-8a08-f3daf9be21b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71cca69-18bb-4eb4-98a8-5d1399a2baea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.254']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd387123-08ed-46d1-8400-4899c732ebd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.233.251.126']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4987a1ff-b490-4c12-8534-5d6be07ef1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.8.56']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efce6cd-280f-4c22-b072-c46efd687116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.59.9']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dfbbab-3c63-4a56-97bf-23f1ab6b7d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd6a960-95e1-4dbe-b3f8-0d5d43e21add", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.199']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45066fc1-0e5a-480c-bcdc-2fad50020606", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.252']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4228820e-bfef-4092-bb22-6b9b79a0830c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.33']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877df2ef-fe6c-41bb-946a-5b2468472ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.41.19.172']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990243ed-3dbc-410b-89d8-6fbd96955946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.76.235.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ef5684-9fb3-424e-bd52-2db16f60d125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.128.61.243']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924d1bc2-ac87-420c-897a-64628e33972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92dcd53-d0c8-487b-acef-887d533dc199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.53']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c9758b-e084-4afc-a3f9-48072e3e3aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc73e972-c619-474a-8403-c06be486e1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce3e3dd-11c1-4ffa-959e-064a31271cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.246.45']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9ef3c5-19e3-479c-ba15-38d2ac04bbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.90.13.168']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7726586b-7d38-471d-bc83-813334929d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.11.152.196']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d37fb-39c4-4127-8ddb-16ca7107b906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.117.204']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2b30ff-c635-47ba-a3b2-3faeb8ee010e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.44.133.224']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf0b742-6872-4fc1-aeac-d382b9eeb65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.8.116.34']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f46af4f-70ac-442a-b60b-ef4662fa1785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c32f3d-2966-4991-95f7-07732360edc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930518e6-62fd-4ffc-95cd-5d4259aba08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.159.36.131']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e9c8db-2cc7-4d8a-a3a6-2e3ea2d046e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f32c9a-85d6-49d6-a9e5-82d62b20c3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-07-02T00:00:00.000Z", "valid_until": "2026-08-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-02-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef05739-9865-4bf3-a094-850e97b32ea8", "sighting_of_ref": "indicator--0d71c52f-893b-48c3-9799-fe2637bea174", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516f0f1a-c9a4-4189-862a-9efbfd80b3aa", "sighting_of_ref": "indicator--f6b545fd-5f70-45e3-beba-a23a31134089", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9152ba-6f6c-41b6-8c7b-06a3564629fc", "sighting_of_ref": "indicator--cd9ecd35-105a-4ecc-8b75-9c6b53e1d647", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b7f7e-448d-47fa-8caf-867c92626d4e", "sighting_of_ref": "indicator--fb35e0f1-5eb4-480f-8b04-604178ddbda0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f6b2e4-9b02-4f3e-a675-019a82454419", "sighting_of_ref": "indicator--98ba5e60-b807-492b-9f6d-761b4e0b12c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d3a2cb-eca2-4dfd-b3ea-78d50cdc2bce", "sighting_of_ref": "indicator--fe1ddf1d-5462-4447-a532-b46cc2be23dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab2f2aa-65db-44e9-aae5-06e802d34539", "sighting_of_ref": "indicator--7c29c831-93ae-453e-a25b-c62edc5cb758", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1f91b8-ea40-4244-86fe-d833dfeddcba", "sighting_of_ref": "indicator--ed811657-ab82-4e2b-95cc-013268143393", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ea556-c9c1-477e-8863-af8bd4366fd6", "sighting_of_ref": "indicator--82e4138d-8031-45ef-a99d-6367afc0ebf9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9220d11-fc32-4354-8f14-8a0bba478d52", "sighting_of_ref": "indicator--18cb33fe-47b1-41e6-ad74-72d7a05211cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2675f57-1abb-463e-ac13-6b016d12a7fe", "sighting_of_ref": "indicator--9fc5082e-41d1-4a09-9604-6d5291517d0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc6b455-7b41-48f4-8105-89346877c6f9", "sighting_of_ref": "indicator--e334cfe2-6973-452f-8183-99b840ec5918", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9f1303-83e4-4fe6-a4ad-289e8f244316", "sighting_of_ref": "indicator--7067d6f2-4039-48c7-b9c5-c9d94b1f49f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b984babd-6f10-41a2-910f-6ab89d5981a5", "sighting_of_ref": "indicator--fe89ec84-9aa5-45cd-9ed3-c7ac402c33af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ea2ef5-0db4-47fc-ba84-f31188540df3", "sighting_of_ref": "indicator--db0b89c6-257b-437c-95be-1a3d6597f793", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb26dce-0497-40bd-a1cd-8f1661d9cadb", "sighting_of_ref": "indicator--b5011e53-88c2-4fef-a3b4-b700cf494535", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8562db-b80c-4523-b7da-4dd47d45d1c6", "sighting_of_ref": "indicator--9334256c-bf0c-4f09-bc67-b14b422e0974", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cf3ba1-e434-4a96-a6f5-6d611815963c", "sighting_of_ref": "indicator--39fabbd8-ea46-402c-94a3-9dfd60b4a708", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e57c0ed-79e1-404c-be05-aa386c5939e1", "sighting_of_ref": "indicator--443cb742-11f5-4a39-917e-0181320775c2", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6596c528-daec-47dd-98cd-b37fbb4928b9", "sighting_of_ref": "indicator--4c6c259e-040c-48ce-8891-7a0d89e40d02", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354fd553-865c-4e55-9c25-f5eb6a31f723", "sighting_of_ref": "indicator--fec1e2e5-e9ac-477d-8776-82d468b9cf2a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5672b854-9c1c-4ba7-9b86-342a32cbe3ce", "sighting_of_ref": "indicator--9b9b3014-be10-48f9-b82d-d0f993ade61f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10e6779-8d30-427f-8ec0-9fb63ed05445", "sighting_of_ref": "indicator--238387b1-a9c0-4e16-b1a8-0020f02df017", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ff8a2c-b735-43ce-bddc-efe418f34487", "sighting_of_ref": "indicator--7f677624-535d-47ba-bb4a-bc21062f4e9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bacda7b-3175-438d-a497-760d00b29f2e", "sighting_of_ref": "indicator--08c89f56-15c9-4ee1-9737-ab317f04aac7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e0e1a7-dbbd-4c0e-9bad-06d0e4949b47", "sighting_of_ref": "indicator--155f11c1-d237-4165-a338-610b7c71f697", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db0e1b-5fb3-4c3a-a256-fa109284816c", "sighting_of_ref": "indicator--ecbc6792-c750-4967-b532-55dced3e0c39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c11172-717d-4824-8463-2c8c67f74a90", "sighting_of_ref": "indicator--cd029780-1474-498e-ba90-56721e07f24c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284ee5d9-b26f-4353-acbe-9d8ed2cb6aaf", "sighting_of_ref": "indicator--51bb0c58-1fef-4b65-8e71-eccd843c90be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab419fb-0def-4834-bd3a-692206bf3241", "sighting_of_ref": "indicator--a2da0b1c-2796-42c2-996f-3096f695ee69", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9c14a4-fac3-40f8-ad69-a319c89c8cb2", "sighting_of_ref": "indicator--16e08422-1902-4c53-81dd-eb6a359b8c9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4deb71a-6233-44af-98c7-86d68de97407", "sighting_of_ref": "indicator--660c1a2e-0be4-4e59-8da5-8ea0fa7252d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bc9e9b-2d25-45b7-a1ab-58a5c1e3768f", "sighting_of_ref": "indicator--ca2f8855-e49b-4e16-80d9-8933400d4dac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10015558-b65f-496a-b5e7-6523ceb08a0f", "sighting_of_ref": "indicator--d3edfab7-65ed-44d4-93c9-b59c260cb329", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd69b313-e0d1-499c-8d21-45766607d0bd", "sighting_of_ref": "indicator--24ec76f3-d66e-4d87-b7ec-2622a573297d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d00b3a-924a-443d-9bee-9385e0c048d5", "sighting_of_ref": "indicator--dc6b15c5-54d9-4baa-a5dd-c0241064d1c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228e6899-d019-4a1c-9712-c30d8ac4f888", "sighting_of_ref": "indicator--e4337cda-eb3c-4606-a3b5-238f905d3e60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b407b6d2-e32e-4ff9-9f17-c9fa87124ee0", "sighting_of_ref": "indicator--0fa9ee1b-711b-4adb-ba87-f5a387757f42", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c4a0d5-7fec-4dd2-9f4e-45b20b0786e3", "sighting_of_ref": "indicator--82b0fefe-c8b6-4172-bd42-95b7e977fb9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce627e6-7de2-4f4c-bbf6-dfe4112c0963", "sighting_of_ref": "indicator--cb0b234a-83c2-4b36-9b02-3b71f5373c30", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a431f46-8b71-4171-a869-d10e3f290610", "sighting_of_ref": "indicator--d7653173-49e0-413a-8fe4-0f4c95dc2d0c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d879d7-5bb8-4c1d-ba35-b3491e4137cf", "sighting_of_ref": "indicator--cae472e9-fcce-41f1-95eb-989e20221aa4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92570c2f-baf6-46b4-b551-a8a03b52e1b1", "sighting_of_ref": "indicator--c3d7021a-c6c0-4d2e-91a3-6137ee1558a7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f7c408-ee34-4eb6-84b6-0140d2c768e1", "sighting_of_ref": "indicator--b90e87b1-0756-443c-896e-ea1bf5f08eef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004a66cb-a29e-41ed-b696-886715e237c7", "sighting_of_ref": "indicator--58a1ff77-1f9d-4390-9d60-9ee72d24b874", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b0d7df-e810-4d84-bcea-06c55e0dce98", "sighting_of_ref": "indicator--ddcc102a-2999-40b4-a76f-2b2969e74d7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b75c1e-5b39-4eca-beff-d28c277bbbe9", "sighting_of_ref": "indicator--df03da7d-d372-4636-a74c-75079529aa5b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8e2db3-3926-4228-9cfa-5770748f2346", "sighting_of_ref": "indicator--5210d4d6-b142-46f8-b810-8bd755c38b6d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41491e6-d0e6-49df-a07c-5468824de62c", "sighting_of_ref": "indicator--88843c57-d405-4987-8120-415f3aa3e329", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb86b65-7a7a-426e-a5b0-e4062e733822", "sighting_of_ref": "indicator--1addac0f-0f5f-41b3-a98a-be83c4cc5d1a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19c8b0a-2d52-4e3a-9532-cf247915ed02", "sighting_of_ref": "indicator--4cc21624-1d00-4078-b9ce-3dc6768965ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cea6c7-0217-4d54-baba-465301ff01fb", "sighting_of_ref": "indicator--8db5f051-feac-4b53-9e0d-7a4a45bf247a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb49469e-8c0e-4743-b7e6-8d9310c55f4a", "sighting_of_ref": "indicator--f164176e-a4d8-43d4-a737-434c5c942c7c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9290e07-ce4f-4d56-a35d-b2ac5cecd19d", "sighting_of_ref": "indicator--69db7e86-482b-4ef5-876d-ab895054acbc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b87094-1f7f-4c8f-92ba-4c40057bb3d8", "sighting_of_ref": "indicator--c99db38b-8868-4eff-b9fb-d706c5bddaf3", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba19cd5-d5cd-489e-a951-94bb0decfbb1", "sighting_of_ref": "indicator--f7be97d3-bcf2-4b8a-8ffc-372c093742f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c010520c-8413-4401-93b2-bf97237e9c01", "sighting_of_ref": "indicator--b43e6e97-cb8b-4fd5-8552-90848116028d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea58d16e-88a8-4ac4-9828-8b9631641007", "sighting_of_ref": "indicator--bb88405e-b71b-4cf0-a311-5da867fd7a2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abd171c-9180-4388-a53f-2aa70d0c597f", "sighting_of_ref": "indicator--cceb9927-ed26-4eca-ba31-dcb099e80447", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4127aebd-e48f-42b3-a847-45e46f43756b", "sighting_of_ref": "indicator--610df9a0-50cd-45b6-ad68-34f7f17e50b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1040357c-ed29-4e96-97d4-6a5df588cc50", "sighting_of_ref": "indicator--7a118db9-50d1-43ea-9e61-0ff24c6e169b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467d85eb-3ab7-4f99-85ee-f075a706fc78", "sighting_of_ref": "indicator--8f83ec41-a835-40d4-83ff-93973f3394a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4631486d-9d00-4c6c-8d9b-71eb5e1957d3", "sighting_of_ref": "indicator--890df7fb-b1d2-4028-9f9a-eae43c89efa1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0566023c-4d03-4b7c-af75-b7736f852ddf", "sighting_of_ref": "indicator--e096bde7-a598-439c-9a8d-a5c8e85fe6c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda2952e-3f58-4e9c-8467-1610a5471c8a", "sighting_of_ref": "indicator--a93c87c0-7b5a-4772-a042-f66599186419", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3064bf2-0630-45cd-b117-12dd613e3045", "sighting_of_ref": "indicator--59181228-0d75-455e-aa5e-3fd1596c9792", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa06a1cf-82f9-4b6a-8cf2-20584fad1ef9", "sighting_of_ref": "indicator--78342c3f-b4d6-445f-90fe-4c23ba77ee0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31fdaab-dc6c-4265-803e-f6e22fa65939", "sighting_of_ref": "indicator--04441717-540d-4c8c-b64e-503db96077a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659b3e95-a012-4db6-a23f-336709120e40", "sighting_of_ref": "indicator--0ae3242a-13f4-4d16-a449-34fb5c4d9720", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf023a40-6201-4a6f-9305-a51c3734f115", "sighting_of_ref": "indicator--02d8c238-a3e8-4303-9035-714389e0fd10", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0caff98-628b-40e7-a4ed-66b65c42e28c", "sighting_of_ref": "indicator--5a60f97f-90fd-448e-9782-a13e15d9e1a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f27ff58-04d1-49f8-be41-87d2322a6b7a", "sighting_of_ref": "indicator--fd228c24-03ba-4075-ac37-14f7f551013e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697fdba2-b2c0-44e7-99fa-63d91394f3e3", "sighting_of_ref": "indicator--ec8af842-491f-4e87-95ec-40865d88750c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6626406a-021d-4054-bcd4-3cac97b2d5f7", "sighting_of_ref": "indicator--021d168c-1fba-4713-b128-9a1d05e9951b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ae2f0a-2991-40a1-aeb3-099616792ad9", "sighting_of_ref": "indicator--34153fb5-17ab-4677-b6ea-2189a993feb8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a4d4b5-ac10-4e1e-9eae-632e932007b0", "sighting_of_ref": "indicator--3a800f43-1378-4cc6-afb6-94165c5daf4b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2117ab-2796-4521-8383-4fce6d82f07c", "sighting_of_ref": "indicator--9f33efa5-3f3a-4e16-ae4a-410f69dd4900", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9c0ace-c9a8-49c9-a37f-8f684c62bf13", "sighting_of_ref": "indicator--36bd51fc-1ea4-4a56-987d-226221d76b03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f3467d-3744-4eec-988e-8a597ad34427", "sighting_of_ref": "indicator--df72fc7d-e43c-478a-aae0-afbecbbfd020", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e20d6-4714-4850-a4b9-4628824c8b80", "sighting_of_ref": "indicator--daf9be20-f650-43d9-8368-ab43c93b9922", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523131e6-fba5-4225-8295-731acf8cc47b", "sighting_of_ref": "indicator--a9c9812c-3e4c-4b54-a282-4736764d4dc6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5650204a-5e8d-4a10-bbb9-efd6093d4ed7", "sighting_of_ref": "indicator--1ed6d894-45b0-4708-8ddf-110ca53240bc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4ebb50-9a42-416b-8218-a33774db5cf6", "sighting_of_ref": "indicator--d4c443e2-8da0-44c8-b5d4-fee353401b7f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5956eb97-768b-4960-b3ec-31a743c74517", "sighting_of_ref": "indicator--fdf454dd-f757-4248-994f-9c5535c4bea4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb30aec-2e16-4370-bc9c-e9413aee863c", "sighting_of_ref": "indicator--64aea5a2-8d29-4032-9ed6-d83079458254", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08798b87-2205-4d86-a346-1e32228336ee", "sighting_of_ref": "indicator--e92eb9f8-6ed5-4f11-9494-dc70cdf20c1f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928e2b27-7cfb-4a84-b2bd-b890207e3b4e", "sighting_of_ref": "indicator--5ffd4ea3-42b9-436f-9f52-356ff3954b6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5fb2dc-4e4b-4990-8858-e0c43b95d73c", "sighting_of_ref": "indicator--9b5540eb-d653-4846-be27-2be5edff12b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1172ca15-626e-46e5-a13b-b61623a169af", "sighting_of_ref": "indicator--4d10e9ee-9544-43c7-891e-cd3bc4951172", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ba3675-688a-499e-85bf-9cbc679e8119", "sighting_of_ref": "indicator--7385c234-737b-45b7-862d-4cc3245610d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d991b5-e567-4108-8881-4b532eca64bc", "sighting_of_ref": "indicator--10b6381f-b510-458c-8a4b-d3d97226e837", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fb6242-f26e-4e24-8f17-2603fbe1518e", "sighting_of_ref": "indicator--c16e90f7-a178-48fc-9599-b0d0d10a1ddd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fded09a-bd65-46f5-aa02-d63c4594f931", "sighting_of_ref": "indicator--d12f3c34-8e26-4ba7-9f4d-25ea16fdedfd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349ada01-1d01-4d7f-b86e-d897b706cab5", "sighting_of_ref": "indicator--7f07cba2-6893-44e7-89cf-f77fe4b58c4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fcc782-70c7-4a72-8c64-0e23be5ea993", "sighting_of_ref": "indicator--eca7a60f-4034-468b-a29f-ad920f2bcfb9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95b65c8-213c-4e8e-a976-40503d452625", "sighting_of_ref": "indicator--e4bb0345-eb92-48c1-b232-4d9771a34374", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f82dcd1-c202-43c3-a54c-de288da1de33", "sighting_of_ref": "indicator--f1a0f394-f3f5-4605-847e-8ba345d0b8e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4588a0-5bfb-49fa-882b-9a97c4cb124a", "sighting_of_ref": "indicator--570aa7c9-8d6f-4aa8-866d-dab9e2270c60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd500709-7d96-4381-9531-bb5a0914319d", "sighting_of_ref": "indicator--3456cfd4-e100-4817-9d74-537acd3d6613", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0c398b-396e-4024-a02c-99cfeaae1044", "sighting_of_ref": "indicator--4cbdca8b-d921-403a-ab02-17c4c188eb3f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ed69ad-5e06-45ae-a321-dac9d9082c45", "sighting_of_ref": "indicator--92772ee3-7849-4962-b52c-dbd7864205c2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7ac575-3515-4255-96ba-17e2bbfcc057", "sighting_of_ref": "indicator--8217dffd-802f-4b5d-86a6-d345d379c598", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451978b3-c01b-47f2-b1ce-effd926483f8", "sighting_of_ref": "indicator--343713e4-8aec-4266-9549-545ed28dcd6f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8f56da-5bc2-4a55-bb45-5c31a61e0f49", "sighting_of_ref": "indicator--acb81224-3663-4f77-9375-09cf01aa6b90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a23d09-cf42-4513-a118-e923b519b682", "sighting_of_ref": "indicator--caf765d9-5a9a-4edc-84ea-b36a997ef4cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31eb2ed2-8d12-440b-8b65-4e06d10909ed", "sighting_of_ref": "indicator--1e334da4-6178-469a-843c-616ce22fe1eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94853906-c0d1-4bd2-b8d8-f8ffdadf143f", "sighting_of_ref": "indicator--9eebd49d-8c99-4d42-99be-971591e9682c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4445e8a-c9f7-467b-9a6a-1cbc4bb27968", "sighting_of_ref": "indicator--6dc33239-1f94-4b2f-b57f-a5f45920eb1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731698dc-5a48-486c-815b-a82f20faff2d", "sighting_of_ref": "indicator--fd8eb802-c27c-464b-8cbd-d135b1365673", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c478e9c-c697-4637-8b1b-9e1e5b762267", "sighting_of_ref": "indicator--7d765ebb-1782-4a3f-82d1-0bd33a0a11fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753bf347-7144-4334-a7ea-9b3d422324e4", "sighting_of_ref": "indicator--c09356b4-ce6a-4675-9a1a-d67bb1c1801f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920db13b-80f8-4452-8f3d-907e039906d6", "sighting_of_ref": "indicator--c742a5e3-fe9d-4547-bb15-0550d0d68067", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05634490-18ab-4cfe-9604-fa8c7cf7b019", "sighting_of_ref": "indicator--797d230c-1cc4-4455-8507-13b0e8fdd87e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f2204f-5881-4d00-ac1e-1f3d806feb86", "sighting_of_ref": "indicator--1f057e22-4ebf-487c-a5f7-f248de7f4bf8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a5964b-26cf-448c-a929-dcb1e40383b7", "sighting_of_ref": "indicator--c059354c-3a26-441e-a60e-8b01af6e4207", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec007c80-8826-43c8-941c-16db5c1173c4", "sighting_of_ref": "indicator--b8738eb8-18f0-4883-8d7d-8b7684e0cb1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b202f15d-f7ca-4206-aee9-b90189eee940", "sighting_of_ref": "indicator--a8ffdf8b-5da8-4611-921c-a4e568cf77a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22748e3c-5247-4b73-a1c2-5d019aaac349", "sighting_of_ref": "indicator--c248a901-3d74-4885-a846-57f02b6a557f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4648185-8eab-434b-843f-4cf241243873", "sighting_of_ref": "indicator--662aedcc-6706-4eed-947d-3a900e13f53b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f82b52-09a6-450d-bd13-b91d5fcd3cf8", "sighting_of_ref": "indicator--162b4805-7f81-43ba-9776-93921d584612", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fc51fd-85d5-4065-9c04-d69f6ee3126b", "sighting_of_ref": "indicator--01aaaa9e-9556-4370-b3ff-491db9efe5a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fb8aba-cbea-46ad-be0d-72e85f3463d0", "sighting_of_ref": "indicator--322607cb-1be4-4ee5-9ef4-c346d56e01ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a4a6bf-3c26-42dc-9384-52af80657d18", "sighting_of_ref": "indicator--0a25cc58-b1a0-49fa-86dd-7f3dacc20329", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bcc69d-6d29-4a7b-b93d-db7f9d27703c", "sighting_of_ref": "indicator--81ed76ae-4790-48d8-94e3-1c45ca9c730c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09477e3-9048-4731-bd8d-b6cad71adfbf", "sighting_of_ref": "indicator--1055ce7c-493f-4758-a913-00872840310e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79512d7d-61d1-4d14-85ab-01b44113a017", "sighting_of_ref": "indicator--0578cffb-bf94-4332-9372-dca4cd770bd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805ba0d9-3fbe-4256-b256-21630a3e071a", "sighting_of_ref": "indicator--ce58ef51-fbcd-4c3d-aac9-3ac46304e9ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabb0ed0-05f2-43c9-812c-6fb7de3ad554", "sighting_of_ref": "indicator--95934184-15a4-4233-9780-c2ac83d5665c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a63312c-0365-4237-b343-b5456ac50225", "sighting_of_ref": "indicator--4b465411-dc0e-4910-a8ae-1597503feba4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f276185-3690-4efb-8a7b-bbbd8ea04b06", "sighting_of_ref": "indicator--a0d7a2a7-68a1-4ec0-901c-06a84108e0bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f54632-f294-4e1b-8cfc-1c6ccc78087a", "sighting_of_ref": "indicator--34350858-c892-4141-a044-2396e5db0588", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c1fe61-4970-40f3-9878-205b179de0bb", "sighting_of_ref": "indicator--d5065154-eac0-436b-bfab-5fd0239ed92e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944ad1e6-1cf6-41be-b7d2-2edd915a97d2", "sighting_of_ref": "indicator--4bb0e9d7-42d7-4792-8de9-10883c9ad50d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76810d6-d67c-434f-8689-bc1d595d6800", "sighting_of_ref": "indicator--82014695-5a1d-45c5-aa62-9260aa387af1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48326fca-f41d-486d-ad76-de33186302ac", "sighting_of_ref": "indicator--f350937d-be2c-4cda-96bc-bad33d6937a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9bf6f6-0a8b-4964-b1be-ae474ecab446", "sighting_of_ref": "indicator--9f385e48-ab48-4b10-8306-20912dec034d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4199697b-d0cc-4889-a235-d3ba8941a246", "sighting_of_ref": "indicator--cf583a9b-42b5-4fee-b091-ff34c79b2d81", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91db0954-35e6-41d5-9bd3-4c2f42abe703", "sighting_of_ref": "indicator--194ddb24-dd21-4240-9f8f-8301ca54af7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e989ccd-2b0c-41e4-9d48-a94039a681d1", "sighting_of_ref": "indicator--053414a2-253d-4df8-b1ed-baa35ef0d6fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470d4f17-2fcc-4bd9-83c7-a16526e35341", "sighting_of_ref": "indicator--a6bf8437-b796-47da-ab81-c795ade6e606", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dbd3d0-8f72-4875-b30c-afa15ce7d4fb", "sighting_of_ref": "indicator--0733a3db-0481-41d0-ae8d-7b6b580627bd", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a69d69c-109e-4042-8637-60146d4dce0f", "sighting_of_ref": "indicator--6ab341ad-8749-4d50-8038-36f323e76b83", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c93b6f-f35f-492b-8234-237b14655912", "sighting_of_ref": "indicator--476344f4-20cc-4269-bd0e-80591cf4ff9c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f854248d-243d-4f0c-8b22-53834cffa326", "sighting_of_ref": "indicator--008d0fe8-2970-4383-979f-6bd26f835d80", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb96c9b-3faf-4196-baad-af6c6bf0ecd8", "sighting_of_ref": "indicator--73ecc36c-d6dc-49d5-8f53-00644f637daa", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b78b1c7-86cc-4879-a0b6-f90debd54646", "sighting_of_ref": "indicator--c3c3b22f-2f31-4b79-9994-2c009c8fd55b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2fb2de-4cdc-496f-b874-bee0757a18d7", "sighting_of_ref": "indicator--f38039c5-42f4-428a-92f4-5afa345ef08a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eb47b5-2e66-4284-a07f-e37fecf56912", "sighting_of_ref": "indicator--26af9b13-e246-4cc3-bbd4-06a1719e526c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560ec658-54a7-4d88-a571-4da503cfa7db", "sighting_of_ref": "indicator--6f794e46-fe65-4ffd-b35b-025df418740f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2404d2-7b54-4fb4-b43b-d994e90d2497", "sighting_of_ref": "indicator--8cb730ad-bd0b-4a66-bc4b-79d7f428c7e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c979f414-256c-44b7-91d3-7bdc1684a188", "sighting_of_ref": "indicator--53c1581b-9e4d-4fcf-986b-d255e1646cb8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c8c62b-caca-4980-8832-e58f62169f31", "sighting_of_ref": "indicator--81b6a60b-e51b-40f2-bdb3-f3930be95b61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9478f7-1f74-4562-8226-7c3be9f58e12", "sighting_of_ref": "indicator--c230c616-9b16-47b8-a80c-285ca8c9adbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3c8858-b979-46af-b982-adda7da54d6c", "sighting_of_ref": "indicator--9c586d90-a28b-4a89-a6bf-8e7eba939632", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d81087-3574-4918-acab-307acdf683d4", "sighting_of_ref": "indicator--2e392d2c-7e3d-4ebb-a800-b4894afab4b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fc0c4f-f74f-433a-a8d0-4f03a14f6f62", "sighting_of_ref": "indicator--8fea2f15-350a-4d48-ac1e-21a71626235a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9d1c75-87df-483c-a0cd-0510200708c7", "sighting_of_ref": "indicator--408bb07b-6702-4b02-bb93-b43de24988fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c07ec3-6811-457c-b804-0c991499eed2", "sighting_of_ref": "indicator--0c7ba793-2def-4582-a2b2-c0cb546b5cac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a232f9-2b34-49dd-926d-434fe58dc365", "sighting_of_ref": "indicator--50b5b1cc-8249-4498-8af5-bcff36e35fac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3832a052-9798-4fbc-bf8f-c5befe47ba2d", "sighting_of_ref": "indicator--4ec28ca7-2f6b-442c-8bfb-8281a19cba79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5943b491-6a59-4b2c-a364-eacd974bc76b", "sighting_of_ref": "indicator--e71a52ea-8fe6-45a0-8016-06197e59c933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2963ce75-f2a4-4399-8139-380181654ff9", "sighting_of_ref": "indicator--68a9cd13-b57a-4716-a0ed-1377acbaa530", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ece1dcf-bc38-4bad-bc80-e14274261238", "sighting_of_ref": "indicator--9d8c69cf-3d60-4aa8-ad7e-f4f562b2d3a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bbe832-5d47-4c7d-b63b-bb898a39501d", "sighting_of_ref": "indicator--03628a3f-d4ff-4697-9fdd-c477e5d1fbe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b160aba-d5e6-4475-a9cc-64322edabec8", "sighting_of_ref": "indicator--97a0243f-d72c-4ab0-aa75-9f1357fbdf94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d32a150-5bc7-4a7e-a78b-1d77e0afbb99", "sighting_of_ref": "indicator--02fc388f-b0cb-43b2-91ea-20d90b07bc35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9c778c-30ab-4735-b997-8c55b05c6d9f", "sighting_of_ref": "indicator--e03ce883-ce1b-4722-983a-2d6ffe954628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d922e4-a7d9-49bb-97b6-d99f9df7db80", "sighting_of_ref": "indicator--2c9781cc-850e-4614-9b26-b79bc18a06f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fa53e6-a680-44e4-bff8-cc13b697767c", "sighting_of_ref": "indicator--9e35373e-b5d8-4053-8a6a-46186c9fcffc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750ee5e7-c342-462b-ac0b-cd94db687d11", "sighting_of_ref": "indicator--b6739b0e-bf9e-4a91-89f9-2f27db879aa3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ab0724-30d9-45d0-88b5-6238243eff92", "sighting_of_ref": "indicator--b997857e-ba6d-4749-aec4-2effac89711d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5036366-68b2-4863-968c-35cdae0029bf", "sighting_of_ref": "indicator--d5c20ac6-0b90-4c79-b633-3db7294cdf57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f633253c-1646-4097-aa04-56af7cb30b7f", "sighting_of_ref": "indicator--cc170207-593a-48c7-8ac8-aaa48a2bfc20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018aadd9-9e07-47c0-bfe6-4ac1352c4cce", "sighting_of_ref": "indicator--e130d10f-f8c3-4cf8-b951-eb97aff847d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0305a500-8926-49ce-9a25-49747a17a496", "sighting_of_ref": "indicator--a142f883-d55e-4afe-adfd-bbd63b3e594c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15be3224-d095-40f0-bf1f-e13a6e87baf7", "sighting_of_ref": "indicator--761c8f99-f5c2-4b64-8c9f-1c2e142c0118", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5654e4-c87a-4171-99dd-ccb0b825833c", "sighting_of_ref": "indicator--bb0501de-fdf2-4c2b-92e9-dd10bf6544b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a294687f-5b1a-42da-8612-f5c67d97f144", "sighting_of_ref": "indicator--1ed10b38-53b9-4f6e-9b40-ecfc4e24c702", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33c4f51-c622-4f4a-9db0-56a191563bf8", "sighting_of_ref": "indicator--e98b02bb-0316-4bac-aaf8-2964a566a1d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d73025-4447-4e80-b134-9228b3427fe6", "sighting_of_ref": "indicator--66573e67-57c2-4642-b0b2-19cc6c9563df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd675856-b45a-4aed-9de6-2ec17dae4033", "sighting_of_ref": "indicator--0cccc966-44d3-4459-be96-6d26fb40fd0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f4be9-373d-4a21-ba88-4f017c0b8026", "sighting_of_ref": "indicator--ed14ccf3-b7e4-43e1-851a-97504d34d62e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea1015b-3ee7-4497-a7c4-1194348d27a4", "sighting_of_ref": "indicator--a25db202-082e-4b5f-93f8-e6af189ad0fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aaaa1d-12ad-4d40-bb4b-fd721dbfe289", "sighting_of_ref": "indicator--93d30a4a-2a7a-4fd4-830c-7bae4dc23b3d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fb2a61-8321-417e-8a99-a7ded5926a37", "sighting_of_ref": "indicator--e15378a7-4fb0-44c3-8854-dd867ab37cad", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085a8bad-7c58-44b3-ba88-f5f60392276b", "sighting_of_ref": "indicator--2e09ac70-1c32-4ed7-8816-b606fedc1fb3", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa3e97b-0842-4e60-a2b7-bc9afc1652e1", "sighting_of_ref": "indicator--a30665d4-7171-42ed-9614-a2344838165b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdfea50-33d1-4d2a-8dfc-cdf15122c979", "sighting_of_ref": "indicator--4082206d-7675-407d-9ac2-3fd537a2ed4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a776ea3c-a738-4664-8474-74351144012e", "sighting_of_ref": "indicator--15bf17a7-9d09-447d-a23a-a6469efdcba0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8d6b8c-6cac-40d8-9d6a-29236efa1d13", "sighting_of_ref": "indicator--625ae6ba-52b7-4ba9-b89a-55a137bc3c69", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f042ecf6-0a90-4b16-a0cc-57c7ac66ccac", "sighting_of_ref": "indicator--53040ecb-cb35-4bc1-995d-b0b9fa0b2a0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1288737e-06fb-4b1d-9f73-669ab7190984", "sighting_of_ref": "indicator--e1a5ec99-6b54-4e46-b5e7-877b55a21ad1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b401f53-d996-4f03-9134-69282bceced5", "sighting_of_ref": "indicator--b7456d6b-a6e2-47d1-9f56-aa5e1eb85723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b9c6de-2235-4d9b-881c-0afe7188ce43", "sighting_of_ref": "indicator--9eea099b-72bf-45ef-a809-548962ff8f4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e56590-8560-449b-a683-39d87a4cc648", "sighting_of_ref": "indicator--d94d23fe-c15d-4d6c-b7eb-ea761544eb97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e04588-975b-4ae9-a7f6-0ebfc5897a7f", "sighting_of_ref": "indicator--8a6a2c07-3224-4db6-a1a2-38970b7d57b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3e7086-0701-4f7f-9f07-eddebee82e3b", "sighting_of_ref": "indicator--1d89686d-b070-4160-be26-a4c8a57eb8ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56905f1c-6913-4cb3-96f6-4ee61fc8e4b0", "sighting_of_ref": "indicator--823b4e38-9644-4177-a83c-f182b1ecc1b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97e236c-e5fc-4e64-8fea-10664ac682b9", "sighting_of_ref": "indicator--6e5b815f-1a90-418f-bf66-1da1bdc4680c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96b7505-9a38-49b0-be1a-9a453141ffc9", "sighting_of_ref": "indicator--a5c7e9e3-a7eb-4921-bba6-f50de5293132", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7015d381-f22e-400a-a7a4-b296174dca55", "sighting_of_ref": "indicator--bcb8e142-2526-47d6-9e47-c05ddfb166a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e100b161-db88-4aac-b500-96a5b8ce0644", "sighting_of_ref": "indicator--ce5a9580-2c73-46aa-845c-4b7d58cd5bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0fd964-f818-4d29-b5e3-eec7011d9c1f", "sighting_of_ref": "indicator--40b08a65-61fb-4b03-a98e-00d61dc17d7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25194b6-2a2c-420b-b11f-c45d102255e0", "sighting_of_ref": "indicator--2234a7d4-ee2f-4730-a1dc-53f5cfafa766", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc2892b-b450-40a2-8ced-85ff787dc767", "sighting_of_ref": "indicator--63a07fde-e5f7-4428-b74e-b83532e6da14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab038c83-de9b-449c-a12f-74761d167020", "sighting_of_ref": "indicator--577d80c5-9613-46fb-b703-554ba61edd5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4797d314-94ad-408a-8321-1b614da72d26", "sighting_of_ref": "indicator--7c23cffd-46d3-4ef9-aad0-97b23c4f3e10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a874965-0edb-4b84-bc8b-a83dfda57e3a", "sighting_of_ref": "indicator--4d9bb9c7-c1de-4008-9d5b-2216bba70991", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882fd65a-03fc-4b6c-ba30-0b18fa91c695", "sighting_of_ref": "indicator--df96cde7-aa45-48fc-9069-708515600830", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e0d487-b7e2-4546-a57a-deb0a2fb35f8", "sighting_of_ref": "indicator--89500de7-067c-4a18-87c3-deb84f37d05a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1460aba-6183-47ad-9d32-4c812600d902", "sighting_of_ref": "indicator--3a2b6626-68a7-4451-b7ae-a7902c4e9fb4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf6d7c3-efa3-4bbe-bedf-82976bc3ce5d", "sighting_of_ref": "indicator--c070ffb5-aeae-43c1-b381-387a8af056f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac642f4-df22-4fb7-be6e-458f5ed92f0a", "sighting_of_ref": "indicator--29f58eed-8ea6-410d-87b1-1022bd411b46", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acb39cd-e499-4738-a80c-a9b6b64d23cb", "sighting_of_ref": "indicator--91518bff-584f-4288-8124-bc3a36bf3029", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a68fbe-bdb0-4358-8e38-c25a364cf90f", "sighting_of_ref": "indicator--e5f75a06-ee37-42d8-a23b-ee497ccd7f3f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932e808e-b6a0-4028-bf34-f65bed11e430", "sighting_of_ref": "indicator--3b79e8b6-ebfd-4cc7-96c8-6d64acca3aad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40951b78-0533-48f7-a917-e8bd2bfd1b9c", "sighting_of_ref": "indicator--55c844e5-f7e7-47f5-99bc-6bce74be1fa4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bdf283-0996-473b-97d1-9865e0f3a3f8", "sighting_of_ref": "indicator--1733eea3-a1dd-42c3-aea0-62e6e3873694", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f34842e-1280-4d43-8168-b7d4f44c8c04", "sighting_of_ref": "indicator--37765194-94d0-412e-b05a-ebad1d9fe919", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23609764-9c17-4bfb-a307-94fa54f13c74", "sighting_of_ref": "indicator--23b20662-ecf6-4654-a193-2c9e8f11ebce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b960a973-f938-4cf0-9706-40b326d07e35", "sighting_of_ref": "indicator--f354354a-c372-4a6b-b072-08e0812699d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7be1ed6-2cd7-4362-bdfb-a61a1fadfcd2", "sighting_of_ref": "indicator--66fc7fb0-b3ff-4a63-b96a-870fe5d08e7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd47d53-52e3-496c-a28d-e07b991ae802", "sighting_of_ref": "indicator--a89c96e1-2231-4111-9e92-c78fa34da9d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6252f6-513e-4275-8106-304e3762d7c8", "sighting_of_ref": "indicator--6432ed0e-8a54-462a-862e-3a42b1dc8b65", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfb9e3d-670b-43da-ae10-b3c2609adbfa", "sighting_of_ref": "indicator--1f5690ba-76b4-4d70-bb6e-489008e90047", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61565692-becc-4bc5-952d-e8ff63529737", "sighting_of_ref": "indicator--bf78d9b6-4d97-4056-9cb3-dc223a64c741", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b5c152-f09a-4da7-ac0a-6570b5114fd1", "sighting_of_ref": "indicator--1c45f959-9fe4-4c3b-b328-32428edda8c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaaf844-4be1-4633-ab95-3989e02460d6", "sighting_of_ref": "indicator--983f8a4d-c0c2-486a-9fa8-fb265d916e9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061eaf5e-55fc-4473-9ce0-f80ea8301397", "sighting_of_ref": "indicator--230b07f2-03b2-428e-b853-13853447e677", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4008aa35-2fbb-4cad-aadc-620fc1dd7b82", "sighting_of_ref": "indicator--fd3b15cd-002c-4076-969a-31c29cb51782", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dab582-1582-42bd-9948-330bb6007b47", "sighting_of_ref": "indicator--e6f1bf91-bf22-4a63-95c8-4596e46f6a13", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b7bd54-8e1c-4383-acc7-c0fe5a043b1e", "sighting_of_ref": "indicator--aca569fe-4b18-4cc1-957e-34c0ae44ff05", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0b5881-efbe-4219-bd68-f6c50217c7f0", "sighting_of_ref": "indicator--c8f9afb6-7601-4236-8226-279a85c45274", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e903736-4fa0-46f5-876f-4f4972103f5a", "sighting_of_ref": "indicator--0e0d3605-d06e-4dcb-9eb7-eff1a94f9065", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbfc356-0ea8-4298-beed-6101bbd88825", "sighting_of_ref": "indicator--8241319c-7618-417e-a824-1b2d9625df7f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf547301-3c8a-4520-b7d4-20de8329d854", "sighting_of_ref": "indicator--6068632e-299b-4299-8d45-f7ba052c1c35", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a4685c-c082-4e5a-a1dc-9736f2cbfba2", "sighting_of_ref": "indicator--87a6d383-bfbc-4de0-92db-749fb11b8a7c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5564f0-1b64-4152-9b3e-99112d6f3a18", "sighting_of_ref": "indicator--e10597ef-b0d6-4fdc-9db6-68cae540abec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9ce3cc-97a1-4af7-b353-578cb1a4ea6f", "sighting_of_ref": "indicator--cd67acc9-d1b0-42c6-8b35-49584f44cbf5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62e82a7-82e3-4f2f-8ed5-045ffa6a3e71", "sighting_of_ref": "indicator--3156e0e5-9caa-49bf-9bfd-c57fca63a02b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09befdfe-8223-4cdb-a3aa-e53673bbfab0", "sighting_of_ref": "indicator--26e64b50-8093-444f-8cb0-75b704adf2fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185061c7-3dec-4cd4-92ed-737050d60970", "sighting_of_ref": "indicator--e4fb8f86-3828-4645-8b3c-2518cf23e309", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092b9410-f6f7-4a84-a280-a7b2bddc2216", "sighting_of_ref": "indicator--58720ccd-8e90-45f3-acd6-f7d08fc412af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c241ee1-7b91-4424-800b-14f4b55abd4d", "sighting_of_ref": "indicator--7b127d40-98a3-4e06-8007-e6f6b5e2402b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30e3141-f780-4830-aac5-a1748218a824", "sighting_of_ref": "indicator--f8639865-ee8f-40d1-984d-bdae3d19b94c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc42418a-ae1e-444c-9d6a-8acc0c1b7ff0", "sighting_of_ref": "indicator--332a48ae-5b01-41e5-a928-73f234a91e56", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ecbfdc-91c4-4d54-bc34-22a021018c51", "sighting_of_ref": "indicator--9f283f60-a46c-444c-b0e9-fe521c794b25", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bb94b9-237f-4ee8-a864-9e7078abfb9a", "sighting_of_ref": "indicator--bb4941e4-d0b3-4ef6-ab85-8beeec03cd89", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429a05d7-0fde-4535-a0f4-89267db2743b", "sighting_of_ref": "indicator--f41aa40d-34bc-4b98-ad35-a519b91bdb12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4df55a2-6f75-441c-8278-97b8c88ad6c0", "sighting_of_ref": "indicator--63d46db3-9c0e-4594-9f40-91be789ff895", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6d257f-37e5-408f-a178-de1a2e3eb70e", "sighting_of_ref": "indicator--424fe2d2-40de-482b-976c-ab135bcd79e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c82ae5e-8bfd-465b-b71b-0f32f8c6550b", "sighting_of_ref": "indicator--cdc7e6dc-97c4-4a17-b94b-fa0b8dbc0311", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9976a6de-6cf4-4e66-b03e-0ca0442376e4", "sighting_of_ref": "indicator--27b72da2-5e36-46d8-8dab-6621a1a75697", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3fac25-d6fa-4493-9794-5e850231d934", "sighting_of_ref": "indicator--16767bcf-ca9e-4fae-8dac-1a2419057d89", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a339598-ee7b-47aa-a676-48a39236185e", "sighting_of_ref": "indicator--5af4882a-b04f-4820-b27c-dd967b48c69d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2798800-f78c-49da-b96d-fc5901353f25", "sighting_of_ref": "indicator--e2ba570d-b12a-4e1f-b82e-5fbdacb8f280", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3976756-ab32-419e-8613-1f309f3d4b18", "sighting_of_ref": "indicator--3440d0d1-f0f3-4b32-a0e9-5bfbd5e22e37", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6961b16-6d0f-4f39-aa1b-dfe4d70e2115", "sighting_of_ref": "indicator--b5fc8757-a5ad-44df-837a-af8c44073ef6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef42a0aa-8c02-4d95-a20f-f1bd0b756132", "sighting_of_ref": "indicator--418f34f9-ca31-43e2-a7da-952a3deeabf4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b323d548-bbe3-445d-95d5-b39eccebc9d4", "sighting_of_ref": "indicator--dd357cb1-9210-4403-ae1e-6af704a7999b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b64b0ff-3235-41fe-8b82-a70b0093fad6", "sighting_of_ref": "indicator--afa329a4-cdb5-4f19-94b6-bcc97b3e65bb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b938dc-f734-4a85-b59e-811dea74da3a", "sighting_of_ref": "indicator--53afb861-7c38-49c6-87c2-8a6b482ac4e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebce8c2-3b75-4a92-8b0c-0182daede05b", "sighting_of_ref": "indicator--8bd960dc-8734-4c82-88f5-d81bf84e0ee7", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5865e5-f7ce-4070-a4b4-83ce797d32cc", "sighting_of_ref": "indicator--ddf0a874-2560-4aba-ad53-30b9250a0436", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc24e57-3a61-4ad9-9797-f5adfc2f8073", "sighting_of_ref": "indicator--0719bb86-787b-4d7c-b99b-f7a06ac51320", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a43ae6-ec28-4d35-93c5-9706b4bc50a4", "sighting_of_ref": "indicator--370161fc-c2f0-4420-87ad-610751eea1d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0087d2fb-0a41-4ce6-bec6-5d215f1170d5", "sighting_of_ref": "indicator--611eb19a-3b3e-4db8-9954-505350fd28c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bbd939-0296-47eb-9298-4c4572c8ea49", "sighting_of_ref": "indicator--63e8a4e7-bef6-4fe0-96e8-d812a8dbc03a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cd2c2d-5839-4e2e-816b-5cd36fc0b344", "sighting_of_ref": "indicator--544c0ca7-a108-40c9-9d39-9b5cb3a1e682", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fd8430-5534-4d92-b190-27494e9af7a7", "sighting_of_ref": "indicator--2e30fb4f-6c5f-41a8-8487-ee544af9ec86", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7176e01-931f-4e9f-9c0d-29a6fd877e0b", "sighting_of_ref": "indicator--7c98eb82-3583-4ace-b5de-22d8d189481a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c2de00-d756-43f4-a71e-c28e8571c415", "sighting_of_ref": "indicator--7eaa6abd-c5b7-45ac-bbf3-640ce79f0752", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8951811-3283-41f1-9f11-5ae78652d4b0", "sighting_of_ref": "indicator--e5f6790d-d674-47ad-b14e-382dd2b42740", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01a40fa-c697-45ec-b741-867ae73fe3c5", "sighting_of_ref": "indicator--3589097c-4ce2-47b4-9f29-16e87cab39dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb129dc6-5d4d-4261-adb3-6fe3c405b2e3", "sighting_of_ref": "indicator--ce334597-762c-4dbf-b09a-832ebbfb55c1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c94ac27-3147-481b-8eab-fd4003ba224d", "sighting_of_ref": "indicator--22d27451-e9c3-4e89-abfd-ef4362ac1f48", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0742ee8-a03c-490b-b8ba-f31c27b6c0f2", "sighting_of_ref": "indicator--66db2986-be33-4be1-aa11-36742f3807f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ab6b9a-f1d0-4363-9402-8d5f1bbc40a6", "sighting_of_ref": "indicator--8fec963e-b08c-4d5a-9836-dac515615123", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8236e9f0-e115-4335-a49f-cc59d7845bbd", "sighting_of_ref": "indicator--d631686d-2b62-43aa-bff1-f61d5976f381", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6064f1cc-22c8-497e-b029-08e2ce1e3274", "sighting_of_ref": "indicator--30a84ce2-05d5-44c1-a059-a7fc5c46e5c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c7da2-9ee8-481a-bcb7-07301e445882", "sighting_of_ref": "indicator--f8177b12-6c63-4a4c-aa94-773842593fa1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fcd42f-c8f1-407b-ba84-1495b71f0b26", "sighting_of_ref": "indicator--9240b890-2656-4ec8-9441-627e8a6f4cee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a152ba4-4a4c-4ab9-98ee-4898caad54f6", "sighting_of_ref": "indicator--82efe91e-b1cf-4cbc-9b1d-237bf461d9b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32232d5c-9181-4ead-94f0-e21fec71b5cd", "sighting_of_ref": "indicator--4cf3f373-0fdb-4b64-b521-9f1a627c1b5b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a3d08a-ccad-4b36-9076-dd0b19efddf2", "sighting_of_ref": "indicator--cfd30502-34b8-4793-a7d6-225a98347c92", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97b034c-24fc-4d17-8065-d5af4309f4c6", "sighting_of_ref": "indicator--6c1160f7-dbde-47b5-8dd4-907dc196b1c1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d581e0-b676-4a5e-b012-675181706e4e", "sighting_of_ref": "indicator--5b5c268c-d446-45c0-b3e8-ca7cdcd378bc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994d7aa8-76f0-43fe-ba58-ab19146e5351", "sighting_of_ref": "indicator--45368933-13a5-454d-9e8f-21f012c559b0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f65ba53-3316-4245-8fc6-668511002c39", "sighting_of_ref": "indicator--ba688d7e-7996-4da7-b5f5-7d21ca5dc985", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd47c11-5794-44fd-a69c-86eb0180e628", "sighting_of_ref": "indicator--3207e2ac-7aad-4cbe-8607-670964af37da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8079592c-e47e-4fc4-a6c1-1eeb03dcf466", "sighting_of_ref": "indicator--a9b6c26c-52a1-4fda-87da-4f24d5899030", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b672a20-c1b5-4b74-866b-06f019c63b59", "sighting_of_ref": "indicator--89827738-8a17-4e32-bbdb-a91b82d2160f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8ed2ca-023e-4eae-84e1-4c4f9e0b19f6", "sighting_of_ref": "indicator--1c348b70-61ae-4ee9-9f79-2daef4c9ffe2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596f0392-5993-4621-9896-da1bb176cc8c", "sighting_of_ref": "indicator--08f692cb-2a26-4511-bbfc-62e61e1835c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90311d78-a0a2-4446-889d-01e05890b06b", "sighting_of_ref": "indicator--edab1768-065b-4ebe-a4b7-a84144a7454a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb2cd24-5b30-4bf2-8a66-d034bf8b9137", "sighting_of_ref": "indicator--b6db45bc-bad0-4f59-af1f-3fae85cb98b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8753cfe-f1ca-480f-b53b-d03c293ee672", "sighting_of_ref": "indicator--45595fe9-5bbe-4cc1-bd54-c16d43f54400", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3767460a-c5e4-444d-acb4-7feef35cb399", "sighting_of_ref": "indicator--f64a28e5-308d-4092-9570-e33fa2c12c49", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a30ddf-ff8b-402f-aa2c-a614979fa0d0", "sighting_of_ref": "indicator--31dd8ded-0ecd-492e-bc23-c2348bc47a69", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467302ce-cd2d-45dc-ba1e-a15f71af209b", "sighting_of_ref": "indicator--745cc5c9-faa4-4911-b8a6-e59f99b32915", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b934c922-e220-4b93-8e9a-d27d1e794596", "sighting_of_ref": "indicator--c13a0438-9694-46bf-9eec-611b32be3ce1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbf7f02-5bba-48f6-b95e-33ed95974748", "sighting_of_ref": "indicator--f4584955-5072-4e72-a7dc-4f0bbc72514a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f242da5d-5bf9-4ce1-b68b-d9474aee11ea", "sighting_of_ref": "indicator--270b96f8-cdd6-4059-87ed-b2e1231d0746", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff58f46-13ce-43f8-8528-c7dd4af1e0c5", "sighting_of_ref": "indicator--f3fed692-3107-4353-be22-7f2a27834668", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa0ac5f-ee5f-434a-9d33-d9fb83f70920", "sighting_of_ref": "indicator--3a8b1a14-d2d2-4aa6-bee1-7144ac820e36", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295cc021-fb9f-4312-a89c-b69b362d5144", "sighting_of_ref": "indicator--d805054a-e399-4d55-926a-496ffa6f889a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0200ccb-cd5e-4943-a6f1-d05134682f6b", "sighting_of_ref": "indicator--49300645-c87e-464a-abf2-a8037ac1d85a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0761a1c-d878-4625-b6af-ee01ba6301dc", "sighting_of_ref": "indicator--fbf977b4-5b5d-4658-b2da-d4a23ff8c67a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7c2fb5-1339-424b-9494-a462981e8b82", "sighting_of_ref": "indicator--2e592b03-e7f8-49b2-b213-a3a4668e0abb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fde5f5d-6157-4bf0-b65c-b6d717214e72", "sighting_of_ref": "indicator--200969ef-9212-498b-8c0c-ef5ef8860a30", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f442d3-70e1-4b4c-acb9-94f56dc1a2a7", "sighting_of_ref": "indicator--cad990cc-db06-4846-9853-795f54b4bcab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c10df0-0a63-4c2d-ac06-6342d8f401f9", "sighting_of_ref": "indicator--52b9fea0-0d95-403a-99fb-855bbdb3baaf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202dcfd4-52f8-4597-924d-f6298358414d", "sighting_of_ref": "indicator--1ecbbaa9-82c6-4dfe-8467-0abaa1a426e9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706f1b71-6c71-4559-95e6-fcde006cccd6", "sighting_of_ref": "indicator--6b0913b6-78ce-4d05-9b00-4df7268e8eb4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f3b75a-b89d-4157-88d0-9bee9b186269", "sighting_of_ref": "indicator--5f4f2e8c-223c-4e71-b1f2-85a3521559a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71686b42-e907-415c-b940-7fe5315dce47", "sighting_of_ref": "indicator--43fe59b1-dcf1-4f84-ae47-09272dbc78f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5410647-c232-446d-8e94-360ac1255455", "sighting_of_ref": "indicator--092b8d27-96d2-4c8f-8665-76c56222879d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935df6a4-1532-491d-89cc-5b1e50e2a23e", "sighting_of_ref": "indicator--4bca2841-7163-4fe2-88cc-fa306a10f440", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7cb991-4872-4d82-82f0-3a4489b7599d", "sighting_of_ref": "indicator--5ad261be-8e8c-4fdb-9091-d7715f77ec59", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68851f4-d259-4f88-bcb3-df363429c380", "sighting_of_ref": "indicator--beaf9d1c-4160-4df9-8d64-7fbd5d39a325", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4983cc0e-fc46-4ea1-9d78-a14c846464c8", "sighting_of_ref": "indicator--9b972ac5-e325-4c74-ab91-ae6ca999b223", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cab2217-52b7-48a2-8994-f739dae5646b", "sighting_of_ref": "indicator--e87dc11e-dd36-4118-9dac-2b010927765e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55494564-ef59-497f-862e-6c8435e4bfc7", "sighting_of_ref": "indicator--c4c1c939-8251-4cd6-9b4e-4ad9ce70fec2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54eb8e3f-024c-4b21-9dbd-0975360349c1", "sighting_of_ref": "indicator--1f4eeec5-4398-4a2c-8195-eb928b8a3ed7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6689aa-c520-450d-8fbc-fa1c2f8530a6", "sighting_of_ref": "indicator--01b4d4e3-1e48-4bce-b587-0868c0c9aae2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e9bccc-1b56-43ed-a0e6-4c729a08d58a", "sighting_of_ref": "indicator--d86fbf94-a5d8-494f-b95d-66a11036d8a8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36e6984-0929-4fc5-9a3a-3a9a43bb29f1", "sighting_of_ref": "indicator--aa1fd15a-9ca6-467b-ab9f-67f372a9f0ce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab502342-0656-4f5a-966e-7172aa0b2bcd", "sighting_of_ref": "indicator--c1f53bff-789a-427c-a3f4-f0db15a8c6e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d9d2a9-ad95-428c-88b7-2dc59bffcdde", "sighting_of_ref": "indicator--9f64ed38-ba68-48c6-a202-5dfd186b947e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5e2ea6-5039-4503-b9ad-9d6aeac53206", "sighting_of_ref": "indicator--44b49381-96de-4197-94c2-d7e43d8aed9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277d7e3f-3798-4213-8067-fb11cdc0e420", "sighting_of_ref": "indicator--18f34fbf-2ad9-4e75-a5b8-9b2ce3f90b37", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4080f7c-c628-4db3-a303-321cc77d2040", "sighting_of_ref": "indicator--8cc97964-f733-4511-b582-07e19749dc02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6971dc4-468f-4a41-bdef-748233ebca2b", "sighting_of_ref": "indicator--0b308eab-ec56-4542-9580-4792633d27e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce272e86-3be5-4371-a995-12219a614446", "sighting_of_ref": "indicator--7b159038-e6fd-407f-937d-9ca1327cb642", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a444dfce-99ed-441b-94b4-73e02ad7e5ef", "sighting_of_ref": "indicator--b989b57a-eb36-4b03-8318-59a684b3d882", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78fe776-5b1e-4d06-b597-63725e8c39f2", "sighting_of_ref": "indicator--f1148036-9868-4edc-9ab3-c96267ae91fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb091589-6c87-4f27-9a2b-08deb3312f7b", "sighting_of_ref": "indicator--34c20f00-1ecd-4f0a-a8cd-99490cc00995", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380a32cf-8f42-4f85-b86a-0d7ec0601c3a", "sighting_of_ref": "indicator--8ccb37f8-3f37-4bf1-acea-dda866e2f778", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fb32d8-21cd-4c7e-86f0-6508e8e0c7ee", "sighting_of_ref": "indicator--d7d4d80d-5e7a-4681-a359-6438712a4589", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ea9438-f2a6-499e-92ea-9ae170d0740e", "sighting_of_ref": "indicator--511d1f99-d2ba-4584-9da8-6914211d91cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e1ff05-824c-407b-a3fe-fea288fa5eff", "sighting_of_ref": "indicator--5ffda9a0-68d6-453d-977d-52cd86fd2f90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed2d4d3-2309-4167-8baf-0feeae8a9087", "sighting_of_ref": "indicator--a072af46-199b-4773-a8a7-7a03204b2f1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f11fd3e-c1e2-441e-b4a9-148de4ce6dbb", "sighting_of_ref": "indicator--086fc164-7ee6-45b3-b6a1-d846e4fb63ce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08435601-b703-4909-9620-c2ee9da95410", "sighting_of_ref": "indicator--5662afad-b653-492a-9331-a46a7bf1298a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db820d25-1d34-45d9-a6ed-41d775cbfbdc", "sighting_of_ref": "indicator--05a44723-66e5-42a4-8619-c1a4fe8b3e9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c2d11e-ff19-458c-8e05-9537efb13f06", "sighting_of_ref": "indicator--8f05bbdb-15c5-44fc-abf4-5d919d705873", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b52e87-d3b9-443d-898c-354e135322b3", "sighting_of_ref": "indicator--713bfd4c-71cd-4e2b-ad44-d06f140fb7cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1ce296-5677-4606-9a68-bf5f675f59d0", "sighting_of_ref": "indicator--7db0c311-69e8-4e1e-82d8-705438eab4e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a380d-5716-4991-a2d1-0d7b04049193", "sighting_of_ref": "indicator--7ef7eced-f5a6-4804-92cf-40505000a177", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d06020-c8d3-4ebe-9902-212634985c06", "sighting_of_ref": "indicator--4729b500-4dad-4568-99e8-0c604e53230e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45337159-5092-40f2-afc8-c82ad630ca47", "sighting_of_ref": "indicator--b1da2f23-6064-40f6-8602-356eccb2e1e9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0248c86c-b61b-4d23-89aa-d9e5dbde38ba", "sighting_of_ref": "indicator--c858c807-2263-43da-b9bb-1138785f8b60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f45e4e-f1b3-4e70-9411-e327c56c2abe", "sighting_of_ref": "indicator--d00e880a-b8e0-4387-8923-ca20800b9baa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0125e4e0-a1bf-452e-a786-0bb425ccf609", "sighting_of_ref": "indicator--7a9b3016-baf3-4673-8ea4-0df248c6c95c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252a7cea-e77e-44b4-a8d8-7b87894c0a44", "sighting_of_ref": "indicator--2c5c482f-f5ae-4e0a-b356-0bbe38ff0708", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18c1772-92db-42df-8e88-bfc74118becb", "sighting_of_ref": "indicator--f0b68552-9190-4dda-8e70-dc1aaaff1f85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e4eb7a-d549-4627-95c3-f95bca2a23d2", "sighting_of_ref": "indicator--df47449f-03bd-4703-bd8b-4be99ea7015c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16387d4e-9862-43c6-833a-9af21706fd13", "sighting_of_ref": "indicator--e56ed696-7c50-4f46-8305-6d4d4cceaa5f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fbb587-3cee-43e2-9383-4ccce317f3c6", "sighting_of_ref": "indicator--d5a2679e-d9b8-4b3d-bd0e-3a9a02f03ce7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df610914-abae-4565-aa54-18a39bc6abe3", "sighting_of_ref": "indicator--75fb75e4-1d2f-44c4-bf25-ebe00f2f3a5d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815e034e-c4ed-4096-9a3f-87a4b498da9e", "sighting_of_ref": "indicator--9d2e9fe3-57fb-4b31-b9f6-05e7b98170a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55927422-fd23-4856-b929-8a0d45d5242a", "sighting_of_ref": "indicator--763bd346-0d95-47c8-94d2-24823ccd8198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14521eb6-0980-4740-9faf-ef291efd5b79", "sighting_of_ref": "indicator--cf0898f5-0114-4180-b1bc-be2ce26dba24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe8e8ce-d85f-488f-9694-5289b56585bf", "sighting_of_ref": "indicator--df3143c3-a490-4065-8094-f6a00ecd31a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947177fc-4028-49db-bb35-c5bc9643f45d", "sighting_of_ref": "indicator--62189418-bb02-4408-9281-5892ff85bc14", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebb639a-dc74-4b51-81bb-f026b5f4ce64", "sighting_of_ref": "indicator--eeee48a8-264c-4ed2-8c9a-c927b3f27aa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e6ca23-a18f-4065-863e-6f233f3eba9d", "sighting_of_ref": "indicator--ff8d1860-1b6c-4d39-9a2d-10c4e9cb2151", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c744656-3c41-4fd2-a33c-afc4de9542b8", "sighting_of_ref": "indicator--683ab11d-1800-4ea2-9373-35ac991b65f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b27552b-749a-459e-861a-5ad4af4fde63", "sighting_of_ref": "indicator--35682f2a-c060-4ac4-a909-4b7042c1877c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7199714-631b-4aee-9d26-f6803e6572a7", "sighting_of_ref": "indicator--d98c5e5b-bac8-42c8-b76d-96c9e5d6018f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe07deb-7118-4470-81ce-50c01304a275", "sighting_of_ref": "indicator--45f58658-216a-4b65-8ca6-f507172ee5c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e1b80c-c1f1-4d45-832e-b41711716c6c", "sighting_of_ref": "indicator--e3a2c7b1-05f4-4a29-a036-ca689371a180", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8ba3c7-ee47-40b7-aeb4-748dcf59067a", "sighting_of_ref": "indicator--8be91f6e-80da-423f-b67c-5d16cb6f707b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465c9ae9-007f-464c-a57f-a59f883ba24c", "sighting_of_ref": "indicator--4b5e6b85-3a61-4575-a3d7-1f9567f04cc9", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5213a5a5-bfd6-45b5-a598-7c82b59954e8", "sighting_of_ref": "indicator--9d776b37-b631-427f-bae4-a34c6a342c42", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b7545b-f36a-4edb-a399-26c95df26a8b", "sighting_of_ref": "indicator--efe62a20-c49a-4de3-96b7-712296276aa1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbe548f-6d1c-4491-9cf4-5eca6d038b66", "sighting_of_ref": "indicator--ddd98e0f-011a-432b-a21a-29e0799a108a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7ddda7-7d69-498f-a357-dc72531f4a47", "sighting_of_ref": "indicator--674ab037-68ee-4ecd-ae42-2915af6e56eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3aeabc3-5a28-4841-9130-7c68d19665a8", "sighting_of_ref": "indicator--90248267-72c9-403d-8847-c359461ff03d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f777f5b-7d19-4c71-bcdf-760adc12b239", "sighting_of_ref": "indicator--f8235c8e-1cfa-49f6-bd8e-702330a7087c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0297b58-34a9-41ef-aae8-2c6e1ba09aed", "sighting_of_ref": "indicator--41cd1036-5b7e-4533-8739-28c65bccf19d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09a93a9-b39d-4398-9c90-fd3fd8716438", "sighting_of_ref": "indicator--c087720e-25c6-41cb-a438-cb380c72ba1f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7101ae2-5aa6-4ca7-9acd-f90d1048d897", "sighting_of_ref": "indicator--42e6dd89-9965-4dc2-ae4f-ac4f90b72904", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc94efd-7f35-4b8a-bd74-6cd346a5da4d", "sighting_of_ref": "indicator--3912164a-8b89-4e74-ad90-9283e9e50f6b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81ef44b-7882-40b2-86b6-22b9a1b83dc5", "sighting_of_ref": "indicator--f7249f1e-462b-455b-a967-29358f70a622", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d89e4d-6614-443d-a982-ce4e0b53aa69", "sighting_of_ref": "indicator--b5e826fb-edd2-4902-9eca-644c1b7d152e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ed97b2-8cde-49c5-8344-6f363385a70d", "sighting_of_ref": "indicator--c38bbcf0-2db3-477f-a2b1-7526fa8a9f1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a2b65b-736f-4aa3-ad8f-ef54354ae10f", "sighting_of_ref": "indicator--200ec156-c823-4629-b7ea-2564086d10c6", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434c092a-6780-45e9-80c4-a442073f3122", "sighting_of_ref": "indicator--47a6cab7-3cb1-4d9d-aefb-7c80e0a73a85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61b15fd-f662-4981-95c8-24759c7dbdd1", "sighting_of_ref": "indicator--1eb856f8-93aa-42eb-bc6b-18512eb6679e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827cc08a-a804-422a-85c4-7c8a22646ad4", "sighting_of_ref": "indicator--88a840cb-8d36-4253-ac18-473dae1d53cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a825d33-9d90-4030-8cbe-dfb3329c7657", "sighting_of_ref": "indicator--1afd4872-0152-4644-86bf-f333ad5b902b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f2aa6-e970-46a6-b274-fa168319244e", "sighting_of_ref": "indicator--0c68f6a7-5b33-48e2-a903-4973f08ed30a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c77098e-a7c4-431f-b71b-ab72ed767f86", "sighting_of_ref": "indicator--485daad9-595e-480a-8d7b-5578a36ce021", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b91a05-c503-44b0-aa4a-4a712519c338", "sighting_of_ref": "indicator--4e5ba8b9-c810-45ab-9e76-0a2aed0a9bf0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba2c8f4-dff5-4a72-9b26-5182988f72ad", "sighting_of_ref": "indicator--27acd2ba-8388-4ae4-807c-a9c1683f27be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58add2bd-5cd8-4fc2-bbab-5d8a4755cd34", "sighting_of_ref": "indicator--7426a62e-0eee-4466-9a44-ed1658a08121", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41067b1-44a7-4d5d-aef2-a9e6f635d0c9", "sighting_of_ref": "indicator--196e7dc5-b611-49de-95c0-0352316310dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c91f79e-6819-4030-9ced-72831f25c1ec", "sighting_of_ref": "indicator--220c0cc2-06cd-4ce5-bfdf-86aafaa34334", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdb79a7-72fe-437a-b6c1-3c52efa87b6c", "sighting_of_ref": "indicator--d120054d-6dd4-401d-8ecb-0e55f9c719fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5861288e-cd89-4645-aa2d-b380962ff17e", "sighting_of_ref": "indicator--640fd101-fc7b-4d01-925b-19e0207b2a0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24fd7f4-9bc1-4a08-b534-bb13f49d86a0", "sighting_of_ref": "indicator--e12fedf2-f3c1-4c3c-b359-c106de75dbae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cb16b0-2e5c-4655-b12a-b0c1b16fb4bf", "sighting_of_ref": "indicator--a1651c09-3c9a-41c9-ab92-1cdee065cee3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44ebf2d-d2e0-4122-a431-29ecdc46a6d5", "sighting_of_ref": "indicator--96cc3650-472d-4e71-b8c3-5c1284301c07", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa906ef-f1d8-40ec-b5a1-620e17c2467a", "sighting_of_ref": "indicator--90ca403a-5abe-4c54-81df-d704701ba626", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d890859-547e-4bbe-b162-d66ce3f5c3fd", "sighting_of_ref": "indicator--172e0d20-8987-413f-9b6a-7fc53c31fe7f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d644e854-0257-450d-8a68-7683d92a2678", "sighting_of_ref": "indicator--864a77f9-382d-46cb-a0db-de8f21716f9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b795b176-998f-47d3-afe2-8158ac482333", "sighting_of_ref": "indicator--bb1d153e-72d2-413e-8b97-2963e5c7d357", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa3b1b5-7194-4a5d-9cfa-4f29d3eee63f", "sighting_of_ref": "indicator--f90ce9ab-efe3-46c9-b396-d892d52cb937", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9042b5-b0b2-4547-8fbe-8ef719d73aa5", "sighting_of_ref": "indicator--89e50f07-ad8f-4fb1-bf7a-4896623a17c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea12a2b-c810-4ff3-b630-a7415a16a10d", "sighting_of_ref": "indicator--14ee5095-475d-44b5-80a4-569beb28611c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8e4bea-f376-44c3-8be3-03d4988c09e6", "sighting_of_ref": "indicator--3a839b9c-1ad2-48f3-baa2-924cc99df640", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c579996-8620-4125-9b9f-659b2e938774", "sighting_of_ref": "indicator--2c615005-dd3b-4893-a712-3c7ca125d4d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc40942c-4438-490e-9221-089559a47ad3", "sighting_of_ref": "indicator--1c7cb667-6726-4b3c-9985-08953902b9db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6041ad97-f1a2-4a4a-b2d5-f6d1b3a2de22", "sighting_of_ref": "indicator--dac51963-af7e-4199-a972-3bd50d3d1f7e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c011f6e7-4658-4175-bf68-132020626002", "sighting_of_ref": "indicator--c70695f1-c189-4d4c-905b-cb87d5cc7386", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fbbc75-f9cd-4089-b7ce-1b4ca777fceb", "sighting_of_ref": "indicator--820a7a1c-aa20-4f02-a9eb-17b7eea42f67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aabf3d-5fed-45aa-88d4-ae5752a1710f", "sighting_of_ref": "indicator--02647a63-b7cd-4486-8d40-e7acd2bbbec7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85e9b15-5a21-4596-ac58-60e540c34a74", "sighting_of_ref": "indicator--fcc609e5-3806-471f-a79b-74a9ae8e8c34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa05c409-d159-40e8-b5f2-030444fed830", "sighting_of_ref": "indicator--bd116594-6ecf-4b10-9000-5db6fa099580", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99683739-13a3-4212-a37d-6206c9dd9b54", "sighting_of_ref": "indicator--097ec1c4-ce53-480f-9e4a-a61d87268918", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a432582-dbf1-44ef-93f3-d05e4e6b8203", "sighting_of_ref": "indicator--9471ceae-a1b1-4790-a784-240147e4c193", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681922f3-c9a8-4469-9281-16f0c0b07e30", "sighting_of_ref": "indicator--f9545b7f-d910-4a7d-95ba-8afec24c230e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604562cd-e296-4c6b-aa4e-c711b029ad1d", "sighting_of_ref": "indicator--0d6990ba-5108-4c86-a8e1-122b3d993c9c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac6515f-9699-42b7-a5c4-2a90923b476a", "sighting_of_ref": "indicator--ba34ea3e-c6f7-4d55-8ed4-db836b94d24a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8d6b8c-f8bd-41b4-92c2-9dbac410b7b7", "sighting_of_ref": "indicator--b744bad1-0df8-4d52-ac1d-60b305dd2ca8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56996380-500c-43c4-925f-2a6e0bb2b056", "sighting_of_ref": "indicator--74e6a0a1-c60c-46e2-8b27-80e1619e37cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47211e7f-10f9-4068-9851-413777cdd2e0", "sighting_of_ref": "indicator--4e224011-cc80-4255-917e-f772ccb6255f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a51835b-a12d-43cf-bd62-d70b623fbdcd", "sighting_of_ref": "indicator--62c8d453-9c57-45bb-b1f3-4c877c374c58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11c4bbd-f508-447a-b502-1dc8923daa2b", "sighting_of_ref": "indicator--786488a6-e3e3-438a-b1a1-7f120061da86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4f5e97-d19e-43ab-a22f-e9b455595615", "sighting_of_ref": "indicator--b4171aea-423a-48a0-b0c2-e22c02b3ddf8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0eee8e-4f79-4aca-b659-8754f73afe24", "sighting_of_ref": "indicator--28c07904-c64b-4884-973c-31c239f5b435", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64054770-3244-412c-b656-95dbb4934d6a", "sighting_of_ref": "indicator--727e7677-8405-431b-9f74-e4033a20f8f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f155559b-3301-49cf-98eb-b4041c332574", "sighting_of_ref": "indicator--fd4649c3-3c6d-443e-8228-d9cdd04196a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235d3cbc-f3b0-484d-a454-72f4b7986826", "sighting_of_ref": "indicator--8e473c5d-8366-45d7-b23f-ae8763097021", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275f3158-0e81-43d5-a0b0-9e15ec931aa8", "sighting_of_ref": "indicator--14c5a853-fbba-4b3d-a4bb-5781734793bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f916d1cd-5e87-4add-a77d-c26515830a9a", "sighting_of_ref": "indicator--7a9d42f8-bc1b-4071-a1fc-9e54407d3051", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ae5afc-e1af-4745-94a5-bddd65d08ed8", "sighting_of_ref": "indicator--ae0f472d-71e5-4bd1-b89a-b6c527d93f1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7a0ca4-b00b-4c23-860f-8beac4de489b", "sighting_of_ref": "indicator--77c2c8fc-c703-43b8-845d-6d91f2ce6efe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822073b3-53e8-4bdc-a484-0076059203dd", "sighting_of_ref": "indicator--fb42d13e-a7a2-476b-99aa-37773395f1ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347058c6-8553-4071-90f7-12c64cbbabf3", "sighting_of_ref": "indicator--b71a1679-5c41-4e21-a285-c2a68158adf5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8245704-6767-4b95-87bd-f54c9d0f58a1", "sighting_of_ref": "indicator--8ea9885d-8ef9-4c5a-aa4c-40ae4946edb8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d090355-5127-49de-970b-12a6551b4b6a", "sighting_of_ref": "indicator--6ec7b802-b240-4f89-8ef5-b0b839720e4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edddb1cf-fb0a-4572-a3d1-984f20d52d27", "sighting_of_ref": "indicator--ef4f3c39-ce06-429c-9c82-3d2a010ee7fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0adeb85-0242-4a52-8fb6-bc2cd2f30ba6", "sighting_of_ref": "indicator--ef4f3c39-ce06-429c-9c82-3d2a010ee7fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7debeb-23bf-4471-8a70-2d897079e15c", "sighting_of_ref": "indicator--d56555a3-fe20-4cff-9ab2-dab62fbce667", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac3a5f8-f521-4874-84fb-8a534b725c9c", "sighting_of_ref": "indicator--801764dd-678a-4e62-82d9-ad180cab8ef3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d88a98-6b33-4430-9c53-f38f4497a50d", "sighting_of_ref": "indicator--ddc79f96-1433-4624-8067-fb04defe6f90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b25640-0422-40ec-aa5d-3bf36b1b0691", "sighting_of_ref": "indicator--5e3c8c70-0401-49d9-8f35-c8ed98f02bf9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1ee798-b2e0-4438-981d-6e541caff2bf", "sighting_of_ref": "indicator--31bea373-9098-414a-9ebb-9f1b1e03a892", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e479e22-548a-45b3-bb13-7bb3793ac902", "sighting_of_ref": "indicator--9b2d90cd-70be-45b6-9790-917dba10594f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba74a5b4-2545-4536-9558-69dc9e603922", "sighting_of_ref": "indicator--046a40ea-47d5-410f-9a8f-6ea515451cd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1045e161-ad61-42f0-9e92-01226a37fbf7", "sighting_of_ref": "indicator--25b43f4a-f1ef-4d09-b211-14c81fcc80d0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd79aca-69c8-4b1b-abcf-bd07b5602ec7", "sighting_of_ref": "indicator--321d3873-703d-4ef6-804a-d16c454fa186", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aba6cb-c24a-49a9-8fa3-fc75c9c301dd", "sighting_of_ref": "indicator--891fc50c-1925-4ae6-936a-56e54c20ef3d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7105357-6036-4beb-8e86-9b5df0edee39", "sighting_of_ref": "indicator--227615ee-edae-4729-9233-705a3fccfe67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1023427a-35da-4d7a-b2d0-e3276a9f9b67", "sighting_of_ref": "indicator--c63e95a8-ebae-4787-b00d-a18866d972ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bffdd5e-2cfa-415c-8da4-b8331c82f80a", "sighting_of_ref": "indicator--29ccefb1-9315-4d28-8734-23f610c080cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9f89fa-b307-4ed1-93c8-fbaa8581d668", "sighting_of_ref": "indicator--a9ac42fd-6c92-4354-b96d-2a81256485ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b27dea-7bf4-43bd-9191-477af4d26e21", "sighting_of_ref": "indicator--557b8ded-feff-4407-97b3-5e45f771f11f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bc4cfd-43e4-4774-be1d-617616d451f8", "sighting_of_ref": "indicator--14a8e108-0940-4d9a-8434-10fc1a4e4158", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bcccb-2a6c-43f3-8db8-b5e8a0a0f4bf", "sighting_of_ref": "indicator--db947d05-642e-4fbe-88d9-56893acb9b2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59292702-c013-459e-9b2e-839b93a1106b", "sighting_of_ref": "indicator--6bbe198c-71a4-42c7-bb1d-3b4c368dffde", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc117c8-1054-453d-94fb-786913d29b0b", "sighting_of_ref": "indicator--ffe6b0c5-090f-4e1d-872b-5134e2bb2b9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d148ed-cc28-4ca7-beb1-acf232eae394", "sighting_of_ref": "indicator--d5ff1655-ae8c-46f4-960e-6ff79cf14a8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310f5f6b-18a9-4723-aad4-880b0147a39c", "sighting_of_ref": "indicator--a1a18b5a-e0e3-4568-8c0d-4bf658a9d90d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d40a44-3538-48a9-bd58-667198aef049", "sighting_of_ref": "indicator--c78f9bf2-47b6-40e7-b4df-244ca234d6f3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d386855-a483-41ed-8406-958b752fb096", "sighting_of_ref": "indicator--3c3e85f7-373e-43b2-9365-167f02bfe8e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5d4d4c-dc04-4174-934a-6dba523eba29", "sighting_of_ref": "indicator--9f84b4a7-a651-4fbf-9e97-a0ed3ad20626", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1349668-80b7-4ddf-a844-0e54ca73dceb", "sighting_of_ref": "indicator--f2360b97-a6dc-47ea-8447-026310be5bb3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77f76c8-df94-4698-8d03-6c3f64aa3b62", "sighting_of_ref": "indicator--e07957a2-c485-4c5d-b413-72ed88db10a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f320b3c-c184-4050-b02c-c03b34b41ae1", "sighting_of_ref": "indicator--81673191-cbcf-45ef-85a0-b09c409f484c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3dcf6e-02b2-403b-b5af-5a2a6e86194f", "sighting_of_ref": "indicator--bd4ac50d-ec7b-4a5a-9d06-b6aa623f002a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdcb33f-f401-4526-ab54-60b27e80e1ca", "sighting_of_ref": "indicator--40aefcc8-66bd-4190-98b0-5555ec8ea34e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a6e208-0f01-4c72-b5ef-3f52a3928943", "sighting_of_ref": "indicator--d37df0f1-c05a-426c-85a3-b7c54fe698e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade7e8d7-879b-48cf-87f5-f8816aeda34f", "sighting_of_ref": "indicator--507e5cc1-4755-4da4-9cfc-e15cb4a1a92a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c4d33b-bb19-4b30-bd33-e933cbdb89c7", "sighting_of_ref": "indicator--ac940262-f53b-4c3c-a8da-d322031f678f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd87b4f-2633-4cae-8081-62e8af316e32", "sighting_of_ref": "indicator--b8b63f59-4515-41f2-9dd7-d649eaca73e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b037329b-97d1-45b8-901b-22a20ad9f225", "sighting_of_ref": "indicator--7acce88e-cd81-47e3-a10b-0e2f72e2fea3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cf1e4d-4857-4c53-bbb0-b3fd2f4c74c0", "sighting_of_ref": "indicator--5188345d-cff4-4814-817b-671aa899e0d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1d9c74-318e-4ffb-b408-f1e6fbc45fb1", "sighting_of_ref": "indicator--feaacd2f-c5ad-4046-aa04-2f0522fd1d49", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca77fefb-f50d-4301-bda0-3f6ce616a121", "sighting_of_ref": "indicator--5bb54fdd-0830-4533-8814-f5870d745e66", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2cd1b7-2b1e-478b-b2f1-d4a9b54ca4a1", "sighting_of_ref": "indicator--fbdd894f-817f-42ac-a30e-b76dad385adb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14918696-a3a4-4b32-97a8-bb61035ce3e3", "sighting_of_ref": "indicator--f30be8fc-bb1f-4f52-bdf3-0f6abf7baaaa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6438f1-fdcf-46ad-be36-8c3094e3f5b6", "sighting_of_ref": "indicator--c8213e5b-7723-4dbb-bfd4-01fca7d993f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731005e9-9e91-4aa1-8662-2a0be0569f60", "sighting_of_ref": "indicator--b38f9b30-0f4a-4178-b6d0-077eb8627d93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f47f22c-0751-4942-8c58-3a299e090b69", "sighting_of_ref": "indicator--e5f4d424-3b0c-462c-80a0-e5ff7b4aeac3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ffc862-1870-47ab-88e4-e01f6b35e2de", "sighting_of_ref": "indicator--aa4152f7-bb08-444f-88a8-08a9cd5cf96b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e25601c-9202-4838-a91c-540c004f9c73", "sighting_of_ref": "indicator--55c72334-50bd-4570-912e-48d3cc35d75c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7ddf1b-363c-44a2-8a61-733ccfbc8c05", "sighting_of_ref": "indicator--5fd712e6-3779-4bb6-81a8-588e1a8d35b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8d30e5-e73f-442c-b23a-fe153ede7a53", "sighting_of_ref": "indicator--94ad6290-a5d4-4295-850e-a638941df4d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6ab4f6-74ad-439d-9c26-fdc260e5e4f7", "sighting_of_ref": "indicator--91b959c7-69ec-4fed-be5c-08e04d205123", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d0d8a1-36fc-42c9-b5c5-df9bb8cd8077", "sighting_of_ref": "indicator--51acd102-24f9-4f4c-a679-de5a3d827588", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c2a7b3-cdc7-4aba-af9e-923b8798ebff", "sighting_of_ref": "indicator--be0d53da-2744-4404-bbc1-fc0957141c40", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a1d25c-6518-42aa-8b0a-640675e07d7b", "sighting_of_ref": "indicator--53568603-ab88-4517-b4a8-8b821c6f26a1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07be0c3d-6726-4612-aa74-cae7911591b6", "sighting_of_ref": "indicator--3fab9da0-ca16-481c-a593-6a47a74abfe9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6279d92-d688-4363-9d66-9e224c95fd60", "sighting_of_ref": "indicator--639332c3-ab47-45ff-b62e-23fe42881a1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad608bd-0b7b-43a1-87ca-1d3094b97ede", "sighting_of_ref": "indicator--d7529754-ac72-4b50-be37-375aea7acea4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abbf120-cbc8-415a-a105-c539bff8ca9a", "sighting_of_ref": "indicator--4124f382-310b-4a0e-80e1-264f505114f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db147cd9-4ec5-45f5-b185-28c106756d7f", "sighting_of_ref": "indicator--64f3612d-9d21-4d11-9000-5bf22c0f56e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3ca84a-a43e-4f93-b0b0-0960b4e87bd6", "sighting_of_ref": "indicator--421cc615-b4c4-4732-923d-2acfd01fd278", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d63acc-ebe8-4d52-b120-3b28789a3fbd", "sighting_of_ref": "indicator--3dea86de-f8a8-4120-81f1-f3a60d07008b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fd4d40-aa6c-4cd2-a8c8-59c9b3af1370", "sighting_of_ref": "indicator--335b65d0-2bfc-49a4-9dd0-133ee67c72c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9cdbcf-0d10-45c4-85e6-ef213a2f6e47", "sighting_of_ref": "indicator--2339835a-2425-4ff1-97ea-481bd59104b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a48305-bf28-4c48-9fb2-5b299ca13ef4", "sighting_of_ref": "indicator--391e7786-35d2-41f1-a628-e3059d654968", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8a5ba2-a7b2-4424-b552-9f9676c476e4", "sighting_of_ref": "indicator--fae3253d-4032-4405-857b-728237a81165", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758e1c3e-e5e7-4750-9d92-bc4372a15825", "sighting_of_ref": "indicator--1cd00419-d662-4043-9c87-d9a96c1142a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a21836-1bea-4f3c-99bb-aacb42858427", "sighting_of_ref": "indicator--88c94753-fca0-4699-9f81-64aa97e3a558", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2730d6b-7631-4698-a5f8-7c2872de2ee2", "sighting_of_ref": "indicator--4d300617-0502-4715-adbc-cfd910eb9186", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5b760f-3a11-4049-8c1a-78c63b0764de", "sighting_of_ref": "indicator--558f1d11-5504-4eeb-b1ea-bd3ca92da8c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507ae326-85af-43d3-a2d3-732096374e13", "sighting_of_ref": "indicator--78b61aee-e0a6-4e8c-893d-977bb4f10675", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d5a241-441e-42df-90c9-671f48fff0ef", "sighting_of_ref": "indicator--1bda115b-f097-4576-964d-5b00db62be57", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b23b91-8524-4591-a1f0-09d7be03dde7", "sighting_of_ref": "indicator--4661aaa3-be4c-4432-8ba4-e211161982ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337ab6e5-f42a-4d41-84f8-fc5bef328334", "sighting_of_ref": "indicator--39d1bcd1-8497-416c-8517-defbe9c332f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a7d728-8a31-4d33-91e2-b4db9dafbd61", "sighting_of_ref": "indicator--ab9db779-5f7b-4f78-bdc1-6c6f5b1d8610", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8774d790-6489-464d-bd86-341e497648e8", "sighting_of_ref": "indicator--8868ddb8-908e-4805-b933-4f42e8e36949", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb92d6b-b4f3-47ae-9ac6-acdbe9258fa8", "sighting_of_ref": "indicator--4fddda5a-d052-4865-963d-86f18cd2bea6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3bcf6d-e891-4937-90f3-9a1f953a4429", "sighting_of_ref": "indicator--b3032a63-9fc6-4ac4-a704-aa061f84a852", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeb1f77-53c1-4f86-aa31-6418ec044d19", "sighting_of_ref": "indicator--bad34c67-fad1-45f6-9916-edea1770995b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94859c6a-2061-4bee-aa41-5e805b144d5e", "sighting_of_ref": "indicator--17d893e0-615e-466b-826d-53777bf02d83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be44bba4-f856-4f6a-ad44-df22a2ff4f62", "sighting_of_ref": "indicator--e15792a2-5d54-477c-9426-c65aa548ce58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc1600d-227b-4914-9fb2-dad971fb2fea", "sighting_of_ref": "indicator--b4ad2851-127f-46bc-ba0f-6227651c110f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e08e45b-3d55-47f4-8df0-d74582ff3396", "sighting_of_ref": "indicator--2004cff8-1bc3-4175-b16e-ae550c7cf61e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b9ee40-e508-4ff1-88ef-d07064d94e10", "sighting_of_ref": "indicator--8aa4d153-6963-4f65-b090-5c48fb6581dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a1bec1-92b9-4399-9030-5c291ece0529", "sighting_of_ref": "indicator--3d391fff-ca02-4b8d-8123-aec7ad290fd1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141b698a-c39a-4722-8d95-797acd232f6e", "sighting_of_ref": "indicator--70f956a4-27c9-4ecc-a1fc-4d72a725a8e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b38a3dd-deb4-4093-a037-cff7da38b267", "sighting_of_ref": "indicator--76bc6cc2-8206-4c8e-806c-bbaca9d3674d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87f0166-5612-47bd-886c-c6e6e881dd29", "sighting_of_ref": "indicator--5d77d2c8-6cc1-46ff-81b0-0bcd3aec872c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e7ec9b-b187-41b2-ab22-285ecde7f1e3", "sighting_of_ref": "indicator--4a73bd47-cf1b-444d-9a13-524b572f1729", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010e951e-e48e-4b4c-ab35-1649c1f87e59", "sighting_of_ref": "indicator--d5b5babe-ae92-44e4-8360-49cde22cb69f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251271de-e85e-46ac-8055-bbe8c949917d", "sighting_of_ref": "indicator--1dba7e67-95b7-43f2-bf77-a43abd40c0e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff31f39f-fa04-45c0-8bf0-d119956ae3ee", "sighting_of_ref": "indicator--c935a048-8c55-4b57-9f5f-6dfba8385388", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3365caea-7ed1-4f0b-9a91-fbc71bb10c53", "sighting_of_ref": "indicator--17b48559-d1f8-48b6-9072-2969003d1a64", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2828dc34-ca81-4d5d-ae82-802d6c0a1f43", "sighting_of_ref": "indicator--0c3b79d2-2741-4a13-85c9-5380f31f5f45", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50206e05-d0ee-4972-b64f-448c3ce48719", "sighting_of_ref": "indicator--a4e820b7-9bc3-4161-81f1-f7edb8e42e90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7761de86-1598-4f02-bca6-9c800af9fa79", "sighting_of_ref": "indicator--c7ac9336-c0f2-41a0-a443-64bf23d3afac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efaf22f-e6b0-40a2-ba57-fbe89bc0fc65", "sighting_of_ref": "indicator--2207fb5b-c47b-4423-ad52-e40b1d94c8a8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087b3c0c-2bfb-43db-979f-414b21a3c5cf", "sighting_of_ref": "indicator--6d4b1435-9bcc-42d9-bd39-d7d1b74c2d54", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b104cdf6-0af2-4922-9545-5a75638a5c6c", "sighting_of_ref": "indicator--c5b9b4a2-ddab-43a9-a381-84e346d50753", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb4349b-cf48-4c52-be8b-351b471153d3", "sighting_of_ref": "indicator--64659f83-f819-41aa-b205-7b7d29383b5d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ab463e-11fb-4b14-8083-3223044d9738", "sighting_of_ref": "indicator--3c15319b-2129-4c85-9b9b-3b1f5d72ee6b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1c8722-c823-4d76-b2f0-a49915cc6abb", "sighting_of_ref": "indicator--89745477-42b5-4978-ab60-e024a54f2af9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93dcf16-5007-4bc8-afcd-721a3cbfa0ae", "sighting_of_ref": "indicator--a9000a5a-78bd-4c8e-b722-f0cbea81f5cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515c6bf-ad0e-4ff4-88ba-347554156fe8", "sighting_of_ref": "indicator--aadbf092-878a-499d-a6a4-1af68d400a9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0cc68c-0467-4bbe-a597-5cd5e718ef37", "sighting_of_ref": "indicator--ffcb9c37-af95-4a11-98c1-a5a0e2d20636", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38548eda-30ad-4815-a23c-27fee060b71f", "sighting_of_ref": "indicator--32dc9b96-12fe-4016-803a-386d72a0798a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4d3721-fffc-41b0-b366-c25c5167c485", "sighting_of_ref": "indicator--35ae8974-a2c6-433b-bccb-e086c6aa2984", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681ba972-166c-40db-9248-a2b27b91f40a", "sighting_of_ref": "indicator--f591059f-330e-4083-954e-a2d5dcc4ea70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac161d-c540-4795-9c06-8c9e40b6e3e6", "sighting_of_ref": "indicator--5273df06-abbc-4855-88bb-db98e0dcdc93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345ff64f-f570-4dc1-a814-4a2031692868", "sighting_of_ref": "indicator--8baa2bb7-2a6a-4bb0-aa6f-52afabac9ea6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d6819-07dd-4734-8e2c-0d058747fef0", "sighting_of_ref": "indicator--72425a05-f25d-4b86-8f45-4cac8f485b01", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06243ff9-fccf-4d2b-9c5a-c15ef53578bb", "sighting_of_ref": "indicator--90a09b26-381f-41c2-a15b-42e1217bbf40", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312bd182-04bd-4137-925b-3f602482701c", "sighting_of_ref": "indicator--0e975191-1e7a-498e-9d55-702dc23ca04d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b340a1-d201-4658-97a8-5b7fc8b04e00", "sighting_of_ref": "indicator--6ebd1365-00c6-461a-b48a-b13d5dc8e2d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d6ecee-3f7d-4343-82a3-65b4a51953b2", "sighting_of_ref": "indicator--06b4dfa5-5597-4b39-a472-bf9dfeb8745e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0720bd-7e5c-40a1-a780-7bbaa55aadf6", "sighting_of_ref": "indicator--e310e1b5-2ce5-449b-926d-b5a13844da38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae46e9c-d982-4caf-a850-c6c32ba680ef", "sighting_of_ref": "indicator--072584b3-f26b-460f-bff7-7be76ab23a4f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773f3fcc-79a8-4903-8444-ac02858f0b30", "sighting_of_ref": "indicator--6a792003-9601-4afc-9ad0-beae4879a531", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db32cb7-3b42-4dd4-ba53-2fc9859811c6", "sighting_of_ref": "indicator--e90f075f-b16e-4c0d-93a8-4feab3c2556b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65eee71-3e83-49a2-9bad-8366f606347d", "sighting_of_ref": "indicator--f6831a43-3d03-43c0-a619-d75e8d21a94d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500ebd1b-0066-49cd-bcf4-48a9dcd83f36", "sighting_of_ref": "indicator--5d74645d-bea4-4cad-bbdb-b3f36610ce03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f722cc6c-fa9a-4617-aedb-70fdaacc2cd3", "sighting_of_ref": "indicator--63a915a9-e426-4554-bbfe-166978c8c621", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b5f452-7d68-4be8-8cbd-af0ad722bb8a", "sighting_of_ref": "indicator--8aa87757-4685-4e50-9d9c-3f96ea8b129a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a27255-2ba3-4f6b-9241-e1794ed90ce0", "sighting_of_ref": "indicator--dd25532f-07a5-4a04-a184-36dc81821907", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cad9ff-652e-4f46-a202-906b756e9621", "sighting_of_ref": "indicator--a70d748e-ab1b-4876-9973-0223ec7d8a05", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae32c13e-8dcb-4ca7-8cf0-5fe700ff382b", "sighting_of_ref": "indicator--4556b512-b972-4899-8e59-10bcb7b79f18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f952efc-0461-4c3f-a939-b38e2e0cf23a", "sighting_of_ref": "indicator--0378b530-be18-46ab-b621-92fad0c2c7d1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06d02fb-564a-425f-9084-29f1f1aeb1f1", "sighting_of_ref": "indicator--2e4c2aab-0cb9-4a1c-9c37-0b3ebed894e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e145175-3d3f-41b0-90c0-61fda1fb87d7", "sighting_of_ref": "indicator--18d5f09a-5be4-4e41-b5f8-ab9812c82ee0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4697a88c-b8c2-48e9-b444-8c2f4d21f0bf", "sighting_of_ref": "indicator--13a406cc-2986-4584-95b9-d1e149596711", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161cba81-4bb9-44c4-9801-5dc285fa1598", "sighting_of_ref": "indicator--38edd4b2-d20e-45e4-9c1b-66a58e19b215", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ac0dbf-0982-4f83-a134-bcf6adf190c1", "sighting_of_ref": "indicator--c9a23edc-6195-4bfb-b5da-95f87d940829", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dae9a1-c876-4dda-a5a4-fd418b6576f2", "sighting_of_ref": "indicator--26e47ed3-e26d-4060-87e1-0b777fa16081", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f31232f-2b4b-4646-ac0f-3a39cc483a9b", "sighting_of_ref": "indicator--e2ed5458-da92-43cc-ae59-6758e2de4ed6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ba1dd4-e7b3-4eb0-8be2-04d186d2fbfe", "sighting_of_ref": "indicator--c5256bf9-488e-4398-abc2-bffae168e7e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2b6edb-9263-445c-a21e-46404111a205", "sighting_of_ref": "indicator--5afc4e48-1ebf-4db2-b58b-74431ba30953", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e866c2c-3fee-4bce-8224-fc7f456321a0", "sighting_of_ref": "indicator--b3b2c35b-609b-4af3-8085-5a70c2f0b046", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ae6a95-f87d-475a-bdd4-f75e985f5345", "sighting_of_ref": "indicator--ac1d966f-32b8-464b-9411-8787a9f64425", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13aedbdd-127c-42fb-a3c5-3a06d08541d8", "sighting_of_ref": "indicator--d7f60f98-aa0b-4ba3-ab32-5dba0b301681", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdaa884-b82c-4daf-ac0f-b4f6eac0e264", "sighting_of_ref": "indicator--b0e97207-8eb3-45aa-a8e7-bfd8464ca78d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8640a4af-edc7-4aa0-a632-f208d720b01a", "sighting_of_ref": "indicator--e4175eaa-77ab-43b8-ab01-38aea89234c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3f3466-1210-4d49-9c59-523873c2f6bf", "sighting_of_ref": "indicator--6ea0ec8d-2a7f-4e65-9a00-2383f879228d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6799a862-9331-4aa0-85fb-a93dfcdf721d", "sighting_of_ref": "indicator--76294944-25c1-4b77-a01b-680d5ae7d5fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a96548-3963-443e-a102-99a188471887", "sighting_of_ref": "indicator--38771bcd-3bbc-440f-a9b7-2119bf5e9bbd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0051b0-af58-4b87-8f1b-7850e9051f7e", "sighting_of_ref": "indicator--a65eea94-c352-4304-bb7f-9493dc4da8b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523e78d4-9640-4f99-ba05-5237967f576e", "sighting_of_ref": "indicator--f80be674-1566-4876-82e0-fa0ec33aa59f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a31a868-d1d2-4c2d-aa56-a54ff70760dd", "sighting_of_ref": "indicator--22446f9a-b202-47a7-8ab0-86d0756f5bca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a23eb4-0f85-49c1-b83d-e6243eb0ab0d", "sighting_of_ref": "indicator--17ea93ae-3b94-4c2b-b63c-7ec3bfdd0e2e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db691cad-a9d6-4ad1-8c54-9c5eeca6187d", "sighting_of_ref": "indicator--9dede130-c784-480e-a0d8-1f5a4388cb3b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9349d7b-720c-4b45-911c-d9cdf96eea0f", "sighting_of_ref": "indicator--a94eef22-3b5b-4f00-85db-ce2a88fac752", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb08164-695d-4300-ac8c-f59e63691e1a", "sighting_of_ref": "indicator--4d58b941-f393-4e1f-828d-f4c4e568ddc8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da816be-7300-42f1-95ac-7e137a98ba94", "sighting_of_ref": "indicator--1866a2ca-6ec2-44fc-82b6-8c84b3dfeb83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1357fd2f-3009-4fcf-98cc-d7a1a5d03c72", "sighting_of_ref": "indicator--993f2a9a-11db-47fe-8305-25cc6ab20271", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92fb5cf-4d0f-47a7-b51c-68748615f164", "sighting_of_ref": "indicator--d93cbb3d-5ac6-4f88-ab26-5aa0dd667698", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64965818-a903-431d-a5a8-1dc857f4887b", "sighting_of_ref": "indicator--161f38df-e8e3-4d96-9233-062edd1219ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5a56d1-21ba-4d05-b543-1f7e70942726", "sighting_of_ref": "indicator--dad86b6f-00a1-49aa-b195-997dc4474ac7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ee6105-7678-4445-afe5-8c47ac5665a3", "sighting_of_ref": "indicator--cd9b9cdb-c673-48eb-8e33-386af3b6a982", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36ddee0-64aa-40df-9117-086409c3beee", "sighting_of_ref": "indicator--e6d2bdb8-5538-452a-beaa-bccbfea79ed8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a593945-41fe-408c-a732-ee6b31963647", "sighting_of_ref": "indicator--216b3247-9dac-4f3b-a7e1-457366118424", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9ae7bf-6ae4-4c66-849d-e478b0a656f5", "sighting_of_ref": "indicator--10f0fdf1-e2ca-4039-9084-45ca1b1a342e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6093a247-784c-4c33-ab12-d142f35afcb8", "sighting_of_ref": "indicator--eb3406f4-3ad6-431b-a08e-6dfc6749c139", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7784096c-d5ef-4325-99e3-00d71e978a89", "sighting_of_ref": "indicator--1d95b3ab-1cae-467c-8c2a-66bf03c07b91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851d6261-213b-44b5-9472-be4913a67709", "sighting_of_ref": "indicator--4b8bb8a9-9e6f-4366-b227-fe5b0f3bebda", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96106539-c28b-405f-8bd5-7da44ec2c45f", "sighting_of_ref": "indicator--5e929e0b-6a67-4813-8873-ad181fbd68ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83803c87-d785-45e6-ab1f-aa70c9ba7889", "sighting_of_ref": "indicator--dbd211a8-36da-479f-8d25-af3d63e1a097", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f692d1-1150-4d4b-a543-7dc1d119bdf1", "sighting_of_ref": "indicator--717bcfd1-912c-4cab-8020-fae9f23cbc3c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a461ab5-5891-414d-8afd-37d424ad453f", "sighting_of_ref": "indicator--efa327da-e973-48b0-9723-02a25d8d5442", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf0ed39-484d-4cfa-9abc-507f4b6e7828", "sighting_of_ref": "indicator--d3de6d89-c54e-48fb-af0f-9bb03e936f08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae2f60f-4ede-486f-b392-b52fb886920e", "sighting_of_ref": "indicator--3501388d-e39f-46f7-8bea-8a9447c5c592", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301f19f3-7c66-4130-82d7-b2ddcf72bb63", "sighting_of_ref": "indicator--905e8fdd-dc8d-4932-b4e8-8de1fefb73b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7bc820-d626-4efe-be48-90766b72bfe9", "sighting_of_ref": "indicator--fd0593c2-5170-4bc2-bf9c-04b1ca4d31f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b24f29f-9624-45d0-890c-cd6a80c90cc7", "sighting_of_ref": "indicator--d3d370ad-06bb-4b2f-a546-379a2c4083b6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a72f440-976c-478e-a5ef-d01cc470f80d", "sighting_of_ref": "indicator--4d7b17ce-a53d-4378-8ab0-de16f5b1f8e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dc6747-54b5-4c04-83fe-8d176172dec7", "sighting_of_ref": "indicator--48381dce-bf8d-46a6-8464-5b6434bf3165", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b70acc-7d0f-4621-8644-23c5d9e2aa99", "sighting_of_ref": "indicator--e06f66a6-b38b-4e64-824d-9262985e64c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8c015c-9d3a-4bd8-8782-8254053f7123", "sighting_of_ref": "indicator--1d70abdc-94ad-412a-8ddd-4107292cc710", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b22f147-9c7a-4d25-bfa7-656fb224a017", "sighting_of_ref": "indicator--e0ddbd97-faea-4f44-8dda-4c2a79882581", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3609d1bd-fb61-4737-ad06-264ffeb28912", "sighting_of_ref": "indicator--6a14d3ab-05c7-4b3d-84a4-81d76067505c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db31af56-4a36-41f7-8f73-c027da0a809e", "sighting_of_ref": "indicator--c345e340-ea5b-4a1f-a92a-aeaf61a4560e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9afe7d-4c4f-40f8-a8d0-84a1ca2ff308", "sighting_of_ref": "indicator--eb5b0749-57d4-4212-a2b1-132a9efc802f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db86a4a-edd8-4c1b-8f47-ec15a8033a33", "sighting_of_ref": "indicator--fb9af76c-892d-4bb9-9c7a-0d416f308e77", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c47bf9-8a2f-4aff-8386-e2b22d988560", "sighting_of_ref": "indicator--6282a754-2348-46e1-a9a8-1120c4b2ec8f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bcb567-75e2-4264-a5c8-0d275e4c67e9", "sighting_of_ref": "indicator--1df78909-a1a7-4ff0-8cd4-776bf45838d9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52118b9-a847-4166-9c2c-e1d5dccfd8c1", "sighting_of_ref": "indicator--2caa1a7d-269d-40e9-be58-62e162fd30d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68522cdf-5666-4a76-9c7d-4ccb1e993736", "sighting_of_ref": "indicator--29e3e012-50a6-4504-93a3-a7b27949feeb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98607683-af61-4fae-b2cf-d15e9ebd2c1c", "sighting_of_ref": "indicator--3dd5846d-a78a-45c5-bb77-235f4a9ed92a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fb944a-9d0b-4c3d-a3e2-1baed4960e73", "sighting_of_ref": "indicator--6eb42d12-a4e6-4fc7-8b31-745f052e6347", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64d0ae8-4d2b-4fd8-a70d-57b06277cefc", "sighting_of_ref": "indicator--22efec40-c81e-4ab0-a4e5-42dfa42d0207", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeedf1c6-b2d9-48cd-ab18-33a557eb7fcf", "sighting_of_ref": "indicator--924b755b-bfc2-49cf-b6ad-48b818d5b3a1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca38a0b-6471-40eb-8b6b-ca94379689af", "sighting_of_ref": "indicator--4b281434-2659-4393-bee2-bea11f1ddf4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d6c8d1-771b-46ae-9bc0-f5c9640f6d88", "sighting_of_ref": "indicator--4da2512d-496c-4618-be03-5aeb855f445a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a8e1b7-458c-4eca-a5bd-80c39216eb9d", "sighting_of_ref": "indicator--feb888c3-c06c-402d-a85d-072b474e00e9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfe9ac2-8d30-45f7-8c0c-02da6fd5b6a4", "sighting_of_ref": "indicator--844a9e28-1b33-4581-b43d-9c8d241a8cf0", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695d421e-e440-49a3-bfd3-424f0cd4d8cf", "sighting_of_ref": "indicator--47c1a436-e40d-4746-863a-e7d733adf705", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505aaf1e-6b24-43f5-bef7-8b1c67a3db9f", "sighting_of_ref": "indicator--b434ec15-6aa2-40b3-9a72-502bd8dd1a19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618ce93f-901b-43b4-9473-a8a0656c4aed", "sighting_of_ref": "indicator--09070552-39ee-4bbf-b4a8-df0df2a99370", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e77c6b-2c51-4374-a8c8-2991c8a5e349", "sighting_of_ref": "indicator--d3960e27-ac9b-40cc-9c19-33758d6fb725", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13361090-1ecc-4f42-8fd5-2bfb3e2c1f3d", "sighting_of_ref": "indicator--fa996781-5d39-4abd-8b59-a333ce3ca489", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5507a866-8cbd-4b56-827f-80dc064237e4", "sighting_of_ref": "indicator--1584d21e-fe35-4395-aaa3-0725d76ee813", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37224d1b-3e23-4352-8bbd-38cc65827c55", "sighting_of_ref": "indicator--a2491320-f2fd-426b-ba9a-04acb39e57b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d616d49-3ceb-4b2d-9f28-c29d5c96f8fe", "sighting_of_ref": "indicator--45b96351-7639-4ddb-ae41-175463c7af99", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3a32ee-26e1-41c8-a74f-eb9950bd1c99", "sighting_of_ref": "indicator--d06dc5be-50c8-49ab-9040-87f69ff5ca79", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc59113-db1f-4bc8-abac-3b81a859bef7", "sighting_of_ref": "indicator--1b399126-b806-47fc-9821-8f47bccdd036", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25720ce4-4a64-423b-b048-eb163cffd17a", "sighting_of_ref": "indicator--f286d677-15d5-447a-b583-dedc4e9d4cd3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76944476-7734-4325-bc37-a587d02143f1", "sighting_of_ref": "indicator--1d71b957-317d-4f5e-bd63-1db654c7bf46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82164f65-f808-43a4-abbb-ac7f23f5f7f0", "sighting_of_ref": "indicator--56e410f3-3259-414e-8bee-bf562a675206", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6363b521-1b75-44ac-a8b6-f6ce9a03c82d", "sighting_of_ref": "indicator--c0a3ceb3-f45a-4478-80c6-81748b2eb1fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6249556-88c6-47bc-80bf-3dce06b224c9", "sighting_of_ref": "indicator--a072b04c-ac50-4c4d-8af4-b0b143ce60a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310469e6-03e0-46a4-9a5e-cd40ba0d2547", "sighting_of_ref": "indicator--1f967029-976e-4840-8de9-91b35e79b664", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f8fd48-dcf8-4247-b3e5-6d582d173442", "sighting_of_ref": "indicator--758f871f-d37b-4324-b1f0-d6d77acf6ec2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186e4a15-46ad-447a-89a5-a25bf725324c", "sighting_of_ref": "indicator--af444ef8-6c52-4897-90b3-a7fe74ab2b1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9295c28-36e5-4488-ac49-d98e308b3940", "sighting_of_ref": "indicator--2f811256-0b6b-45a1-98f9-e024fe6b8b6d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba67a9c-6486-4f19-98d5-2536efe4c4e3", "sighting_of_ref": "indicator--5f41bd70-c2a0-4b66-9c39-1c45f313df7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f026b7-14d9-4f6e-864a-5b1aff4eeedd", "sighting_of_ref": "indicator--b1628c83-9594-45fb-ab22-eca11ec54175", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15899b3b-9e00-4d80-accf-db67631ee800", "sighting_of_ref": "indicator--ade54519-b514-44eb-91f3-fc99291ae597", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ab6f4e-4e50-4596-be39-480d15a7d07d", "sighting_of_ref": "indicator--8c23f285-886d-40cd-b4e1-bcf35ffa01a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15b46a6-6d9e-49a1-ba37-ced9206945c1", "sighting_of_ref": "indicator--672d4093-fd67-4a21-b049-aae1ba445333", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d18ad5f-3584-4243-a848-3b717259b827", "sighting_of_ref": "indicator--451fa95b-14d8-4711-8bc1-b3e674ac3db7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ed1beb-3939-4048-88f5-b3ffa22bea50", "sighting_of_ref": "indicator--8aa16182-70d3-4978-8f67-4db65c1eb7c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70456338-6aca-4a55-833d-461d2ed86ed7", "sighting_of_ref": "indicator--83c804de-b316-41ea-86fb-1a6faaf17b8a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b169d8c-b0e0-49aa-9250-249b3a6190b2", "sighting_of_ref": "indicator--9dfedd63-ce30-422a-bff9-beb25ea53a32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed29b44a-f024-4d0f-9ab8-2d1d6c5206d6", "sighting_of_ref": "indicator--0e3029f5-85a0-434a-a4d2-44ff698674d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4666466-2d36-4956-a7a2-6c0c7adf90d4", "sighting_of_ref": "indicator--cdb91280-5679-4286-934b-78b94976d052", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb99aa80-e688-4e8a-8ca4-25752694d1a4", "sighting_of_ref": "indicator--44d94a5d-7e8c-4fb8-92fc-f4ec2fb7daeb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5288d382-e6f9-46af-a52c-12637ae7e78f", "sighting_of_ref": "indicator--04c92727-fa8a-4409-96c9-4967e7cd4532", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9eb12f-15d3-4152-8860-3a18a0f943f7", "sighting_of_ref": "indicator--564fb211-53b2-4d76-9146-70afa367e6b5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eca8de1-d34a-47c7-ac53-4695beb39486", "sighting_of_ref": "indicator--e00b195f-158b-4e13-969c-b0fc5e1f5a90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8917058-2f12-40c4-b6e8-0d25e1b09658", "sighting_of_ref": "indicator--1bf2ca6d-4e52-43c2-8cc5-aa4923a264c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5864e8e-4cff-4ab7-90b6-6c42c6175b43", "sighting_of_ref": "indicator--20d03f53-7e3b-4341-a07a-e98a2ba114a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ef7bc1-6811-4a57-97ef-74102899b835", "sighting_of_ref": "indicator--02c3c246-d366-4c7e-92ad-8d69322541da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e113aeb5-7c30-419f-aefa-b6d4358a4a3b", "sighting_of_ref": "indicator--e12d34b6-c962-4a42-84f1-974b63c9c0a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4d9517-f817-4f35-b0c3-12c8bbc353b4", "sighting_of_ref": "indicator--4a5b9d72-2859-4557-9708-87b325786521", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cad9ba-32ef-4f80-8e6b-a82b9d95a6f5", "sighting_of_ref": "indicator--734c9b95-4d31-4334-9454-70c4461d7d37", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9fe880-0568-4e72-b141-a6bf075f1522", "sighting_of_ref": "indicator--f54c17b3-36a0-4c07-9ee1-175de3679e2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105c22b5-a4c8-48b0-b66c-68ef542b3a12", "sighting_of_ref": "indicator--b2d2345a-8f6d-414e-b2f1-237885ceb0ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c17300-4d99-4f15-bce3-b65f89233ba6", "sighting_of_ref": "indicator--bd4f49b8-1ee5-4429-868e-17176457b18e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afde4ca4-0783-4f36-87ba-e5681d49d99e", "sighting_of_ref": "indicator--c1800eed-8a3e-469b-9ca6-a2fde3d2c545", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a04496-42b8-4892-a14a-7802d7bc2565", "sighting_of_ref": "indicator--89f017cc-450a-41db-a6aa-cc3ac469e668", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fefa82-1f9f-49b3-b683-07c022e1b2d3", "sighting_of_ref": "indicator--4da2bb5f-d86b-4a9f-a7b2-cbbb94eb4ed4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063eb211-ad4f-49aa-8da6-644058f015df", "sighting_of_ref": "indicator--a68ca415-5e3e-4aa0-a084-4d0dbece8be4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2764bf7-c976-4858-bce2-6e3f7c64a29d", "sighting_of_ref": "indicator--afcde428-ce21-43e2-9dc1-787843986fa8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79543aab-3f1d-4b16-bf3a-86d93e7a2536", "sighting_of_ref": "indicator--50376556-31c4-4c5b-b73b-d529b6c825d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9930e592-6c0b-4df2-b690-7b809bdf43a9", "sighting_of_ref": "indicator--1780a822-7d5a-4c0a-b09f-e752865afae1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1f483f-385a-4313-a85a-15209f29fdf7", "sighting_of_ref": "indicator--cf05bfa3-6405-4046-9339-f8195a40927f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73debdc7-47c8-437e-b635-59cbd538cc0e", "sighting_of_ref": "indicator--b1967a3d-71d2-4f7c-b9c6-79912300c49a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6adeb3e-fee3-47b5-9172-73a5d98ba029", "sighting_of_ref": "indicator--ccd88a0c-7625-4592-8486-00e9d7c333cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a8c958-ecda-42f9-b179-7bfc75243f55", "sighting_of_ref": "indicator--5a7c7d66-bbf5-4364-81ed-850570d83698", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf1f787-4f34-4d0a-9b1b-bad60bda6325", "sighting_of_ref": "indicator--38610930-845d-49d9-b56d-977a282a6c20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f481a546-a200-41a8-910c-fc8cc0aa76f5", "sighting_of_ref": "indicator--b32584e4-d36f-4bde-9cad-575cc21366a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e6d834-b9ec-4475-84fb-4404f2d9e3d8", "sighting_of_ref": "indicator--5f53fbf5-8402-42d1-8a5d-c1ea87ff209a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c0f923-2d29-4dac-95cf-3437a48b1547", "sighting_of_ref": "indicator--18ffc68d-c7d4-4827-bf65-3e78b70c7b60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f285a0f-7a29-4cca-afa3-ce26adddc5b8", "sighting_of_ref": "indicator--e2dd69e2-aef3-4fa1-8314-8bbb771396f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d778ef-0c91-433f-9df9-b855ec1fa884", "sighting_of_ref": "indicator--22ff826f-27c2-4969-93fa-b4de1fc6167e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74d9a32-c9b2-450c-a347-ed388eaefda7", "sighting_of_ref": "indicator--c79d4bfa-d952-4443-a9f5-a926aaed2c82", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe0e02b-a7da-4d51-a1eb-eda71aa3b09b", "sighting_of_ref": "indicator--73a40507-7220-4d83-a1d4-4138148c0591", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a721b17b-4904-49d1-a855-977dba0cb725", "sighting_of_ref": "indicator--eb364989-40fc-44e7-a97e-f1c2fb7ba453", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bd23ad-efbc-4991-8612-cd5531af0195", "sighting_of_ref": "indicator--1ffaf9a5-8e7c-4ce3-8266-f1fb3d188c9a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90d3eba-1df1-4e54-9d87-7a3aa51c402a", "sighting_of_ref": "indicator--f670f671-9d86-4669-b437-61f451dc667b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b59858f-ec89-4c48-b515-7649292524e5", "sighting_of_ref": "indicator--7ef84fae-98ca-4a92-b353-03e0d8175007", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b9a630-d883-46f2-a931-9be4335ffb72", "sighting_of_ref": "indicator--208db48c-1b11-4987-afc0-e81a32e55413", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8ef736-552f-4d37-a55a-401215149523", "sighting_of_ref": "indicator--b0bf853b-e268-41ab-92fd-c33c0bcfd9d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83c4259-ea86-4efe-8497-eda350b60239", "sighting_of_ref": "indicator--be3c728c-b8c2-4a18-9a74-22566da198bb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e953080-5edc-4840-9196-a20482526080", "sighting_of_ref": "indicator--f554493e-7bd7-4097-93a8-1815edea4909", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c034328a-c5b8-48cb-bf89-ddbc589d0fe3", "sighting_of_ref": "indicator--2c7dd3fd-b069-45aa-8a8a-67a792248e5b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df74c902-0395-4aba-bd42-73342eedb09a", "sighting_of_ref": "indicator--2b861c84-7d89-455c-b749-f0c842831580", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90352e3-3daa-4b00-925c-dfee731c7d86", "sighting_of_ref": "indicator--68670467-6f9a-4bab-afd1-f99b2bec378c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d84e22-55d0-49fc-b611-643b9a468be5", "sighting_of_ref": "indicator--a358a6f5-d0c7-4261-9f45-1c1e30172ea8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2da761b-1ba1-4e00-970d-274fd3db6cc3", "sighting_of_ref": "indicator--aacbf24e-3b89-476d-b7ef-188841787e58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba884144-4f4f-4656-9360-34d9f32feec3", "sighting_of_ref": "indicator--b3cc7b5f-5948-46cd-b7f4-66ba159ba9e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2a4c7a-cbc2-48d4-bc53-cbafafe630ec", "sighting_of_ref": "indicator--907bb6b2-48e8-45dd-97cd-0e4803be2f23", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff3b452-0b7f-4034-96a4-6f3386ee9ac0", "sighting_of_ref": "indicator--e11aa5a5-5b62-4a53-8a51-6577c7e04848", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9c331b-fb11-488f-9346-65cc8c41ebe2", "sighting_of_ref": "indicator--3a997695-5692-4e34-95b2-ee955922282e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4808ac3f-d070-45df-827a-4a8f7596b702", "sighting_of_ref": "indicator--cb4c6e8f-d921-4ffd-9358-0ee6e3e26e7e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b88361-994f-4aac-9f9e-bce66b845150", "sighting_of_ref": "indicator--236bb460-13c1-4f04-83c3-3f3f92eea060", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b57878-d3ab-436c-9180-9be927ff8ac1", "sighting_of_ref": "indicator--f22ccefe-23e2-480f-b0b5-b771e4503255", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07886639-1959-44e0-91cb-97543647135b", "sighting_of_ref": "indicator--8fffb63d-6905-4bc4-b22d-38eca844e785", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c89306d-4da4-4dd2-b64d-67eb08f2875d", "sighting_of_ref": "indicator--0e7da1fb-de52-4b2a-9545-5933269e6886", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4963740-8184-4359-a621-9c27b89478e8", "sighting_of_ref": "indicator--6cd52e00-f24e-42ea-8e64-a77d778777be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba13dec-2d6b-46cf-b851-6a208e30094a", "sighting_of_ref": "indicator--a924dd58-b1a1-453b-9b23-d09cabb6b3bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcbe68d-282a-434d-aa50-cab0c30cecb9", "sighting_of_ref": "indicator--13e767c0-68e5-4535-89dc-e5ecead2c45c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c6207d-a91b-42fa-acb0-6bc493bdd2cf", "sighting_of_ref": "indicator--c7645b2b-1b16-4b72-9bdf-addbf19884e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b8492a-810f-4ab7-b147-8a7e4f686804", "sighting_of_ref": "indicator--689428bc-2bbc-4d9c-92f9-157c73e11135", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca03996-0c07-43e2-9b8e-8931ace3571b", "sighting_of_ref": "indicator--d68eeeb1-d3cf-4d1b-9a0a-1eff46024d9b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb66359-3438-47e7-8cfd-3bfe4d121d94", "sighting_of_ref": "indicator--08fd5ac2-c0ea-4d88-9202-295cc6fc78b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f714bda1-4c73-40df-881c-ad1fdde6ecb3", "sighting_of_ref": "indicator--84674930-1d92-4f2d-9dad-7b6f84125c2a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1e0512-ae01-4054-8c82-1e77dfb63545", "sighting_of_ref": "indicator--cb077913-db4a-4f81-9b6f-07b5db540d24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0910fc3b-7056-42c6-aac1-ff55a887ffcc", "sighting_of_ref": "indicator--9b8d9730-ad33-4ca5-851e-0960e8b3763c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de3b5f1-513b-41dd-89f5-f7f09d33da09", "sighting_of_ref": "indicator--cdff65ea-8bc3-4b82-b25d-c8bf8a2e4748", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42afff07-ab73-49cf-950f-7a92b09d26f4", "sighting_of_ref": "indicator--947094b2-4269-4678-bfce-3204c89e77fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dc1597-f115-4c1b-82bc-f018f72091cb", "sighting_of_ref": "indicator--18e23d62-ca82-4a5d-9059-852918cbc339", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba41e535-9823-4578-8bc7-eff6aece64c7", "sighting_of_ref": "indicator--8ae8c33b-589f-47d0-a228-9b161bb473c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432dd514-fbcf-4be6-b85c-3c5353ba3825", "sighting_of_ref": "indicator--5b30b93d-e6ec-48ef-985e-68845b33d2a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d42f3b2-0277-4a6f-9496-2c6cf879b4da", "sighting_of_ref": "indicator--42dc032b-5cf3-4213-b3a6-72f78ff0035e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d091edf7-7e45-4b5a-9d4f-266c1b03bba4", "sighting_of_ref": "indicator--00fbea4f-d825-4a55-b61a-4ac2992fd82c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15375c84-4afe-423d-b0b1-3ac83f2e06b5", "sighting_of_ref": "indicator--a1272484-6dda-438f-9b35-8c4aad67c19d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadd2b23-6dae-48ad-a8aa-b04ee40f2e58", "sighting_of_ref": "indicator--f1bde8b3-8bc0-4191-bc6f-904b2826ec01", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e2fb31-55f9-4931-8116-b701e185218b", "sighting_of_ref": "indicator--ebbed1de-2d86-4d18-af8d-5134af4d5544", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dde685-90dc-4cd9-86fa-37f4ce5d3c9c", "sighting_of_ref": "indicator--4b42f0d9-6101-4049-8c35-28f4be009f20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b0fa98-3604-4b09-97f3-eefaa78e2500", "sighting_of_ref": "indicator--6a70366e-cfdf-47f4-8488-39c452da7b1a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7980fc8-bb73-4919-af16-77dc3f13a9ee", "sighting_of_ref": "indicator--621a07c5-e08c-4af6-a56a-a24e862d0f87", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504f0a96-4e89-4462-9f79-23c76ffb8c4a", "sighting_of_ref": "indicator--2b8303fd-52bc-4f93-bfe0-46ccc1a4ff2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f23eb95-1865-4bba-9b7c-ba686ace8190", "sighting_of_ref": "indicator--72b7a1ae-79ed-4263-a2fd-aab7ad7a86a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec175926-7a5f-44f4-aefc-3558ef6cb31d", "sighting_of_ref": "indicator--36afba57-5fd7-47de-8d5e-b0b9136708a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6059c1f-4e40-4380-9dcf-4d86e6984baf", "sighting_of_ref": "indicator--7dc49cdb-c44a-47c8-850c-1bed9b39a6b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3ec006-e56d-4e5b-be95-fd893d635558", "sighting_of_ref": "indicator--a5c50812-a1cb-47b0-9a3c-9ceba8978b8e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9453d2-3c06-4664-a2a7-910770be8215", "sighting_of_ref": "indicator--ca244952-ee54-4305-9633-7074439bc98b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbdf44f-9bba-4f11-8f35-7afe156f219e", "sighting_of_ref": "indicator--760710cc-889b-4da0-81fa-36d127091cd7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531528af-c3d4-4b74-b8dd-75532d9c5b12", "sighting_of_ref": "indicator--c82a7815-d004-4764-99e2-bb02648c5e82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b17ab8-fb06-476c-9b9e-c5dff9cb14dd", "sighting_of_ref": "indicator--872e4887-0fbd-4e95-8b08-4046c913e761", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57984c07-ea1d-4ce5-94c0-7f27eba812d4", "sighting_of_ref": "indicator--5f69a272-5db9-4a2a-afdf-35636008fc9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15474ced-a006-4d59-9ed0-8530ed20ac4d", "sighting_of_ref": "indicator--95416045-c562-46b1-8129-7678e5b71f80", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dab9e2-1a9a-4816-977d-5aa7b33ce01c", "sighting_of_ref": "indicator--ecb601e9-5c65-4b86-8ede-4ca3d379589c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb807c1-ad5c-4b30-8fc1-fa5913620385", "sighting_of_ref": "indicator--51c16d8e-9c28-47ce-9c37-cabe86110f15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f52c78-2ff1-41b3-98b8-ea85fd5716be", "sighting_of_ref": "indicator--30e0d539-f75c-4158-bdd4-2318d63faa38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2193a9-91b7-4c44-a023-afdfcfba69c6", "sighting_of_ref": "indicator--d01e3f0d-40b2-49f9-99a0-996b384041de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154cc8ec-ed01-4663-a420-cf9f8bb4d351", "sighting_of_ref": "indicator--2e80d7ce-ea05-4601-89da-ac29c74fd840", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291fadc7-c3cb-4367-aec2-f511b880a985", "sighting_of_ref": "indicator--6702a327-a723-475a-b051-c8d4b44a5382", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf568c26-89d9-4b57-812f-3deca304f943", "sighting_of_ref": "indicator--af6b3d83-316d-4797-a6f9-478acb0b7731", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c26a44-990d-4ad1-b146-795a1c1037dd", "sighting_of_ref": "indicator--bf0b48ae-0105-4a90-9823-82e52373816b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5345f6-f600-4533-bc86-7023745a2071", "sighting_of_ref": "indicator--3d7b1bf3-3cc1-4cd4-9b97-b5936c454d11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d75bd26-b1b2-4cfb-a3fc-6dec6c9c1124", "sighting_of_ref": "indicator--8dc077b4-51af-45e5-a83c-d23ec1f23f43", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225a90bb-c400-477f-84a3-7d3b65d2daa9", "sighting_of_ref": "indicator--922ebb11-4d7a-4ae2-8bb5-df98659d1d86", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c91544-7d4e-40fe-8d86-444b37bec3a7", "sighting_of_ref": "indicator--b7b674de-ad90-4ee8-a815-fd47e260b85e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4abd9f2-86a1-4dee-bc20-00e89f15c3a0", "sighting_of_ref": "indicator--be8fd97f-abc9-428e-a4eb-1ae0d9c5cd76", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd70a694-b0f5-44bc-ac01-1d75ff9677a8", "sighting_of_ref": "indicator--fe5ee48e-55fe-4a06-ad1f-c101366f30d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e145046d-f723-40cb-b066-49793f942d89", "sighting_of_ref": "indicator--5f66a840-15e6-40ad-8bb0-f8839fffb088", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a433e838-f4cc-470f-8abf-94fcb5d9ee1b", "sighting_of_ref": "indicator--a965b03b-373e-4bdd-aa62-f47fa41e602a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f147e842-aa33-4d60-b8ba-bea8978345f7", "sighting_of_ref": "indicator--c1586977-44b2-4697-96a0-070363d1b506", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210f20b4-c492-4825-b12a-f278a649de56", "sighting_of_ref": "indicator--3cbf5a9c-fe87-44f4-b1f8-6abd833dad5f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd353028-80b8-48f1-a573-e52b57e24d72", "sighting_of_ref": "indicator--cb14698f-098c-4ddd-bf4c-c448e9d1b448", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84e2966-41bb-4f4c-8552-5fbf690f69e8", "sighting_of_ref": "indicator--6ab39a33-f10f-40d8-9798-4cb895e4c82a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c475447a-6b00-4b3a-b7d5-a650b022fd12", "sighting_of_ref": "indicator--fe21f0f3-bd43-4e56-802f-77ccf0e623f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f5aa04-147f-4b2d-ab91-33623bd95de4", "sighting_of_ref": "indicator--247f2681-574b-4683-a55a-acd810d1db2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8defcbba-ea8c-47df-892f-e908d8da4ba0", "sighting_of_ref": "indicator--9a16bd84-af66-4bef-a47d-f336a36bebfe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8b1bcf-74b0-41ef-8963-b8cfb9f1748b", "sighting_of_ref": "indicator--33620be2-d276-4896-8450-0f6a918bd6ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edba77f8-c783-45ea-990f-ebdc2c45734d", "sighting_of_ref": "indicator--f6b192fd-2d74-4078-896e-9388ef60072f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baeefef-a557-4b24-97f9-880e9cf88f57", "sighting_of_ref": "indicator--fb1a3edc-961f-4153-8133-bc2ca4d8d1da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dadb178-ecb0-4eeb-b441-72afc0605eb1", "sighting_of_ref": "indicator--98043792-27b5-4956-9e79-ba550a0c5fef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436f7134-d96e-421b-a8ab-0ece70cae376", "sighting_of_ref": "indicator--06974b35-a85f-4713-81e3-d927dd4fd355", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7946b0-b26f-4de3-b733-4d0c4ef70f1b", "sighting_of_ref": "indicator--d5aee80b-0072-4d3e-979a-8e6dea2baf0c", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabad634-ba73-4648-b76f-7ffcaff2f8fd", "sighting_of_ref": "indicator--9c631122-1aa5-4f1a-8827-db92b453f0ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68b6b3b-60fa-41da-baac-d97c69f26190", "sighting_of_ref": "indicator--456efe55-5e57-41b3-bdf7-8cf9893a5073", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f0d55e-6dcb-43f9-ae58-c99e9af141d4", "sighting_of_ref": "indicator--e704a1a4-73b1-4cf2-a734-c17bb63c0aa6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561c1a28-ade0-4968-8066-fc8f50ec8425", "sighting_of_ref": "indicator--59f7df3c-9168-4db0-ad09-1e71f72d8321", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35db3385-92fe-48d5-9c08-b9854ee956a4", "sighting_of_ref": "indicator--d68b9759-9593-4c8a-9cf7-b63a53945d7a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e98a6-3d81-4a04-9d1c-c114ac9bef0d", "sighting_of_ref": "indicator--f79b0d44-f582-405d-9ed2-59987960aad1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b690f0-94ef-4b66-a16c-55af249c7712", "sighting_of_ref": "indicator--d1c596e0-6012-4b30-a7c4-81181fa607af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8b8a19-8799-4859-b416-fb1abf2ce1e8", "sighting_of_ref": "indicator--b2153631-fca1-488a-8652-e539d6e07352", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61d8db1-711c-47ff-91a5-d30c2c1b3064", "sighting_of_ref": "indicator--11145372-b634-4d3c-87a4-e2deeab09e32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892958f0-41f8-4080-9198-24d710560bf0", "sighting_of_ref": "indicator--17ac634e-ff5f-4373-961c-1b2a3ce85a33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc29a5f-b02b-404c-b6ff-621189efcf1d", "sighting_of_ref": "indicator--8e07a417-ca87-42fe-a985-f1edb9f71d49", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9e7c06-61be-4e77-84ad-7f43a1c5cf91", "sighting_of_ref": "indicator--31999e59-ae0f-47f5-8109-5f116f5fb80b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ca24d-bb97-4ca4-9fc9-aba527a6ee1f", "sighting_of_ref": "indicator--fc784555-1475-42f7-bcc3-57e4732df443", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc99acb-5b26-4085-a61e-0b6e8c0e99a0", "sighting_of_ref": "indicator--1abfb345-5dd7-48d4-8028-5325956f80a1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65c9227-7595-4fd1-a098-e24427916066", "sighting_of_ref": "indicator--31fde254-eee7-407e-9a6f-f4ea76ac4925", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b154ec-2be6-42b6-8bec-cd4b712f5acd", "sighting_of_ref": "indicator--43bffab6-5838-44d2-b581-08900f8a43c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15815c5b-e01f-438c-8a10-d2286d9d6271", "sighting_of_ref": "indicator--973e3e20-5f3e-4dfc-9611-d2e6e68fcc35", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e3cb22-ecfb-4d34-b63d-d3f472a7f812", "sighting_of_ref": "indicator--477c4993-14b0-4c6a-8e66-27c5b1ba61a8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70984c1-4832-4bf5-afef-c1f36c2c9a29", "sighting_of_ref": "indicator--7e39b5c0-7b66-4b9b-bc6a-b520c41a306c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa1c50a-673e-4147-8773-c2ff696c3865", "sighting_of_ref": "indicator--62be4a90-2f2a-45a4-827b-c9d085b80286", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db15228e-94ed-45b1-82c8-28a8d0ca42f5", "sighting_of_ref": "indicator--f77a3eb9-ce12-4ca3-9d45-dd723ed225fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b0c550-6f7a-4388-9f37-07dcd738cf68", "sighting_of_ref": "indicator--791c5cf2-1c41-4b42-b81f-ba6634ca4a3d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cf61bd-5e94-4fef-b3f8-a418c598350e", "sighting_of_ref": "indicator--5a429650-9d05-460f-afc6-087d1f91251b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7023b4-9fd1-47d8-8755-bc01101b6ca0", "sighting_of_ref": "indicator--649bea24-e56d-4b91-9f51-0cdd4ddbbc73", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b75d8d-feba-4818-8332-246945ea3f49", "sighting_of_ref": "indicator--e8c5291b-46e1-4a88-bee9-3fb130b6560f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c901a66-dac0-4433-8190-2b33e7616aea", "sighting_of_ref": "indicator--244cf767-be20-4ee8-a70b-fe1412eb6f51", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833542a6-220b-4973-8425-4d8ea24e6afc", "sighting_of_ref": "indicator--f440359a-1397-4f15-be66-3762e0087c15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b829b7b6-4df6-45e8-8b33-474304472475", "sighting_of_ref": "indicator--936a4893-364c-45fc-b527-0f9802135bef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d61bf1-d99c-4f4a-9770-676c914c1e9a", "sighting_of_ref": "indicator--1ed4b308-3a1d-4ead-b10b-52711afcc081", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe680f9-fbb1-401f-9ecb-5990d6672922", "sighting_of_ref": "indicator--cf9f517b-3b51-436b-8dbe-1e10f90e82c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38e723f-dcee-4957-b128-02f4ab25871d", "sighting_of_ref": "indicator--88789746-b446-4704-9f58-fae02052c7a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1892c46-e42c-4906-8b9f-2147342f1db4", "sighting_of_ref": "indicator--545072ce-31a5-43ce-be80-ad7a62706deb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81041d77-f7b9-415f-a884-d06d7ea436c0", "sighting_of_ref": "indicator--6584eb45-3a20-4fa2-9de2-b54bfa1027dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1e99c4-1499-4205-be0c-f5a5e7272fe1", "sighting_of_ref": "indicator--c8cf9e59-e19c-474b-a914-9763a0fb5d57", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015a0f6a-83f6-4586-af57-867b26cce571", "sighting_of_ref": "indicator--3761dd88-0382-43f6-a762-03ab67c1b1df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d18d276-1e06-438c-b46a-30db5a4af66b", "sighting_of_ref": "indicator--8ab8c0fb-e23d-4b23-a835-8ce93a07366a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df50a0df-8510-42e3-981f-0bbc690dd8b2", "sighting_of_ref": "indicator--ab34ce34-c1f0-4d2d-9412-8e19bbf38e49", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5320b519-26e8-4a8e-9c5a-5319885f748a", "sighting_of_ref": "indicator--f9e854f1-55b7-4e98-9089-95f497ba7275", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58eb6051-4442-45a6-8353-b69c40c6bb6d", "sighting_of_ref": "indicator--6ce2773c-42ec-44aa-8cc1-65b0518d086a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53f01ea-b132-46d6-9f55-7af0f95143b5", "sighting_of_ref": "indicator--0a1e6cd5-bf17-4851-9647-239984cb0e8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfff2ed5-eb71-4795-84b9-1b6b35396a5b", "sighting_of_ref": "indicator--c8bda738-e57f-4ba5-ac2c-33b4dbc2efde", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1327f2c5-c581-4623-8183-3aaa19a51cef", "sighting_of_ref": "indicator--9dc622ac-54c2-44b2-afd4-d6873b807be8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf37294b-8aea-48ee-a53b-5092785468b8", "sighting_of_ref": "indicator--e7a764f4-dd70-41bc-9b30-251e5f2ada5d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cff7f95-b70b-441e-91a3-47a0dc7f160b", "sighting_of_ref": "indicator--33d80158-f0b6-48d5-b23e-0502a3ad9d33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b736979a-93a9-4fc5-b311-f8c1d84d39c8", "sighting_of_ref": "indicator--e9ebca18-5c49-4660-9ba9-faf146efa2a7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aa30a3-f890-4ec2-9b97-16e90436e9bc", "sighting_of_ref": "indicator--3be19554-0763-4048-bf1e-f6dc309af09a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b732a93-c623-4d76-aaf5-ef1e09925c2e", "sighting_of_ref": "indicator--5c4c7803-d68f-4a2b-92aa-2daac98f151e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfaf4826-881c-4c23-ba80-e061f140e19e", "sighting_of_ref": "indicator--6ee17aa1-17b0-45d2-ad4c-f27fbf9ebd66", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec89653a-be6a-4673-82c4-6309e4eee5f8", "sighting_of_ref": "indicator--02ca9a25-366f-4e5a-bbc5-33582d6ed02e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e66d39-ec64-46e1-ab81-43a04702f3b3", "sighting_of_ref": "indicator--1b086999-eb38-4b19-b7f6-6527312ed88e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1c84f9-d3cb-4513-b297-38409f2844d5", "sighting_of_ref": "indicator--f12afb9e-d224-4f83-af36-d7863a9150c1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e62c5f2-8c17-4ff6-a604-15cea00793c5", "sighting_of_ref": "indicator--b6d17285-256b-4013-a331-85bbb59e02d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b583da31-7ad5-4aa2-a6ae-218e62536219", "sighting_of_ref": "indicator--47b2da5e-c67e-422c-98ca-5e2ffb76b8fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1947816f-a998-4c02-b451-8e91b1d51407", "sighting_of_ref": "indicator--b3e358d2-9272-4d83-9923-420785614339", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c86300-1975-4d18-9c36-ae9b3f4b93a3", "sighting_of_ref": "indicator--a7301dbd-dd15-43ee-9f3a-4621208e9d02", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1361197d-ec01-42ea-adbe-fac9008686be", "sighting_of_ref": "indicator--7033bca3-de99-4c4b-a65a-ff682488be8e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc21b058-8c60-499c-b350-05a835a0924f", "sighting_of_ref": "indicator--241feb9a-6c76-4e18-8874-8eb59802e95a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d268183-7977-4524-92d1-36ddd9598d87", "sighting_of_ref": "indicator--ef6bfbd3-a34e-4545-a506-512bc252e57d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a917718-a04c-4ffa-91e6-5fc68f693d07", "sighting_of_ref": "indicator--f059fe97-7abd-4dd7-9143-557e52f7139c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4066fcd6-71c8-448d-991c-11eab5556815", "sighting_of_ref": "indicator--fcf00b30-ba7d-4fc8-9245-1fa2575ccbd2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8274bee4-066b-4afb-90f5-649c885e55a7", "sighting_of_ref": "indicator--dc37c213-b1cd-43af-a610-af9e2f19bf82", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dabcb1a-dd1b-41d2-b876-ed9b3c794ac7", "sighting_of_ref": "indicator--33cfa777-d640-47c1-93f6-120f1632904b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecfd339-490b-4692-b0a7-38e869cf2671", "sighting_of_ref": "indicator--415ad328-df99-4247-bf2e-86b78fcabe52", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c23f8c-2b15-4001-89e7-5ac9e4616922", "sighting_of_ref": "indicator--25b0a390-eaee-421f-a948-dcce34491a9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d60717-3823-4ba3-9c2d-edaead38bca1", "sighting_of_ref": "indicator--f8f8b9f1-ef7f-4a8b-b2c7-6a872347ff74", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361938f9-2545-4113-a9c1-308913b2ad5e", "sighting_of_ref": "indicator--0c66f2a1-8bc2-4f9e-bb43-9d0a9c70543d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794817f3-65ed-4fa5-af5d-c6fabc360799", "sighting_of_ref": "indicator--eaae174f-8f0f-4334-a4f4-d5972c396165", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b592e8-1617-4c19-b0ca-9ee2135cc7e0", "sighting_of_ref": "indicator--0866593f-71f2-4bff-8ac4-316c537840ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c1e364-74e7-4ef7-9dd6-9e7ed82eaa7d", "sighting_of_ref": "indicator--5502dae7-53d5-4f95-9f90-ec95e7bd8760", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21991347-cff5-4161-9b78-af9941a3a3e2", "sighting_of_ref": "indicator--7056776a-cc8a-4897-a92b-0f662a883a8e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b454f05-ba9e-48d5-833d-1b6bdb080ff5", "sighting_of_ref": "indicator--a12b6bf6-94c9-4938-af5a-2a68b3d0f87f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec06b67f-abd1-473a-ac76-f40c1ceec2f7", "sighting_of_ref": "indicator--baa5e474-3e87-489c-963e-d3139bb3ca8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07aabf24-bc0a-4ac9-bc9e-978e636c26d7", "sighting_of_ref": "indicator--04a30fa8-e908-4e01-af57-2eb90617e8bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6ebe18-698e-4a41-8cc7-3d409a360714", "sighting_of_ref": "indicator--e148671a-3b22-4035-a1f6-54a91dcaafd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f24bfca-c1d3-4903-b9c1-c418a80008ce", "sighting_of_ref": "indicator--2309089b-9f09-44c0-b0f2-6210923af208", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf84c052-dbbb-4d88-bd06-e2212fd4f080", "sighting_of_ref": "indicator--b013d1c8-a665-461f-a4c5-06f77df3bfd1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de8fe68-cbdc-45b6-8379-227c089fbae9", "sighting_of_ref": "indicator--18b2f4fd-8119-4cb0-9dfa-39c3a8200ba9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaf9660-7f55-4f96-8b13-4d98e7784e93", "sighting_of_ref": "indicator--f0a34a1a-edbc-4df3-a836-5e2d3ebdd98f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab2587d-f486-4261-8bef-950706989cd0", "sighting_of_ref": "indicator--d3fe0999-d3d9-4b54-ac73-f5f3b4584996", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274d7172-4161-4fdd-9fbb-ee2e20465387", "sighting_of_ref": "indicator--a27fcb91-9f14-417b-bbba-866bd8e3e634", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f553bb2-a466-438b-a0bc-6071581bc726", "sighting_of_ref": "indicator--03cb2f58-db94-4e65-8210-a96a040d0794", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2be004-8055-4338-86df-668a2db4c34c", "sighting_of_ref": "indicator--4eca76b8-b629-4559-b26d-2a977fddd621", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce179f2-2b56-4c09-821a-8b59d1e3f395", "sighting_of_ref": "indicator--9a1e44ae-3b76-4693-ab8b-7dff32f40c3e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f3db98-154b-4023-8925-8ccdf301bbf4", "sighting_of_ref": "indicator--23c1daa8-6f41-4289-9ba4-7e6a40108818", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3e5273-45e7-4fc8-88e6-ec3d7e92a8f1", "sighting_of_ref": "indicator--c183a1ba-2f8b-46d3-833b-74c2fe20c515", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dd6cce-e404-4978-9acc-21291daf2e6e", "sighting_of_ref": "indicator--aa95cdbf-e74a-4fbf-8ce3-048c3fc03851", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fac7957-0609-4e28-87df-def4b3c37fbe", "sighting_of_ref": "indicator--c914327f-7bde-4107-8634-4fa299a2942c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1328b0d-cf31-442e-959d-adc646322c1c", "sighting_of_ref": "indicator--13843c06-ee3e-459a-ae33-abc372350c6c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af18d38-9d52-4872-94cc-4b3b5d707be9", "sighting_of_ref": "indicator--3792ab62-8a6e-49a6-9688-ff15f373c3d9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a574eb73-e404-4c8d-a7a6-63f89622aee3", "sighting_of_ref": "indicator--052cc05a-dbaa-4310-8ead-6d77986583e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fce189-d8d6-4f13-8f24-3f7558045f5d", "sighting_of_ref": "indicator--80321bb6-8931-40ee-a1a6-e5447318549b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6337776b-8e9c-4957-a12f-c31ec33e29d1", "sighting_of_ref": "indicator--6594bb9a-3acc-4938-96dc-ceffcae447e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4ba148-31ca-4d2b-92d1-9c3f1188aac5", "sighting_of_ref": "indicator--dcc3d432-0220-480d-b999-240f36e63a32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316c8feb-536e-4ab5-87ae-a4d0dcf823a1", "sighting_of_ref": "indicator--b7922ff3-81fa-4501-aaec-f1ebabe25ffd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8880c1-04ff-4658-966b-4cd1849da374", "sighting_of_ref": "indicator--9e035b80-470c-46d2-83f1-7e2db0163a89", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f357c27-b424-4431-9019-e39c4d5a4bc2", "sighting_of_ref": "indicator--4c3fc8d2-f5b7-4cd5-97ca-1c7e2371427b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02934ef-0369-4f69-8386-8fe0adffbc5e", "sighting_of_ref": "indicator--340fac83-89ce-49df-a9f6-bd4ee219f122", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d24b86-b9df-45fe-b3df-60729873808c", "sighting_of_ref": "indicator--68c6dcdf-3b63-4149-a987-6a84f857f042", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e69ef21-7b82-4ec6-975c-95d07d0b6d02", "sighting_of_ref": "indicator--68333c88-7cc6-457e-9f55-40e20fb97c1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ad14db-3f96-468e-a6c2-e5f5462bd939", "sighting_of_ref": "indicator--1fa9b252-576a-4870-8812-6e4cffd6ab77", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d08977-025f-4ffb-b6e2-5ddae65a7b9f", "sighting_of_ref": "indicator--ac5a69df-80c1-4283-8276-33d77377540c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a25267-78f5-4223-8223-030c13149bf0", "sighting_of_ref": "indicator--6b114bff-a6e9-4899-a96e-204dae9d9ad0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78011621-2648-475b-9940-3bee02af8238", "sighting_of_ref": "indicator--c09bb261-bbd7-4de6-8461-0e6057706eb3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6b2669-4cd5-4554-abae-31758eeba195", "sighting_of_ref": "indicator--efbd7084-480e-4cc6-b8db-28057cff41d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336f9b12-233b-4c09-8f34-5bd9decd83fb", "sighting_of_ref": "indicator--07a926fe-4293-47c9-9baf-7739bc7a491f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaf2980-9320-49b2-858f-99ade6d1f8b4", "sighting_of_ref": "indicator--da11233c-f4c4-411f-8937-cfd44aa080c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475a1252-6cc3-4b24-a88a-f07ce9557330", "sighting_of_ref": "indicator--af19dc28-8eb7-4d59-881d-29804435dfa5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9292cfda-53ae-468e-b72e-fd293cb476f2", "sighting_of_ref": "indicator--43783ddf-6317-47c3-80bb-d97e35f050c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4391006e-5dc4-4561-a1e8-d106db9e07a3", "sighting_of_ref": "indicator--de5e4aa8-5ba0-4348-925b-c7c9235cd6a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d32e99-a6d6-4693-934f-0f4765fb9832", "sighting_of_ref": "indicator--2551f84f-c659-431b-a0ca-98c7b92f8d09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3058705-5327-4b0b-95e9-9e9351c26140", "sighting_of_ref": "indicator--241fd794-9fd6-4e37-9632-b2e8550ccf74", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b13ca-66a2-4d0b-9d13-1f69ac05f65d", "sighting_of_ref": "indicator--2e096ce9-81c0-45ec-aab6-3ec718603040", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bb4bcb-a2a2-4914-bf70-9ae9238696dd", "sighting_of_ref": "indicator--333a4111-7195-455a-85b9-1d47c8a4bc29", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54890f51-108e-4c0e-a564-574fdb07e5fd", "sighting_of_ref": "indicator--2bdf8d49-0731-44ba-a1cf-c6fd9b7c7a84", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a1a7d9-8b6f-404c-b4b5-f4bd4f9fd92e", "sighting_of_ref": "indicator--02803172-9c1b-4309-a7b9-876e71e1061e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af084ed-0a63-42c9-be6f-2010140456ff", "sighting_of_ref": "indicator--8bea493f-374e-4468-9a51-cb72b5d3e7ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7946c279-f3bf-40e2-b9be-c3de393c2596", "sighting_of_ref": "indicator--b4804cfe-4c8c-4abf-8c48-224d33911bda", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb626499-e81c-4f14-9f8d-89926a2d8bab", "sighting_of_ref": "indicator--c004726b-ab0e-4768-8768-0443bf160437", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ac7f92-1325-456c-989d-a115880e21a7", "sighting_of_ref": "indicator--bfa7da93-e249-4f13-81e1-e00f26c300a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c51235f-8d6d-4839-9732-dfe18043c09b", "sighting_of_ref": "indicator--9c4829f7-d060-4ea7-94fe-c6cc189f18f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da337b3e-b578-4721-ac1b-ebeb9821b78f", "sighting_of_ref": "indicator--4b36e678-47cf-4678-aff5-ba55c55a3cdd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86863d2a-3a55-48c0-a669-ec49076270bc", "sighting_of_ref": "indicator--48432703-1dfc-4e89-8e6f-6b94223ff4e9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01fe46e-b13b-4355-9629-30a6dbb2172b", "sighting_of_ref": "indicator--7eb143f1-7607-4a13-9920-bfa0b10411d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac26dce-c8a0-4775-b078-44862c04d9f5", "sighting_of_ref": "indicator--adeff0fb-b146-4673-b15a-8432dd7db6ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44798f18-63af-4f10-886f-03143f111cbe", "sighting_of_ref": "indicator--057bc9cc-8f6a-49cc-b0b8-1c2be69d1203", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dae004-2abb-45d7-9375-39f3860b6aea", "sighting_of_ref": "indicator--1abd4fec-d12b-4d15-9f1e-82387c413ed3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87815924-929f-4674-9799-3e6edb996d61", "sighting_of_ref": "indicator--84573cf2-2ba4-4fca-a15f-871377823923", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a091406-e509-47bf-98e6-4092469f035f", "sighting_of_ref": "indicator--4cc029ad-13de-4db5-82f7-3c43f3da138a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03b09c3-6fad-403f-bbfb-bedab57c449c", "sighting_of_ref": "indicator--a2aff36f-d55f-4d33-bff6-053e33a0d8a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54d0f06-a5a9-45db-a9ab-14f4df1c94d6", "sighting_of_ref": "indicator--d42f14b1-d2b4-45eb-95c2-0d42d08d4eb9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fe770b-ad35-4e06-be01-6864719294e3", "sighting_of_ref": "indicator--6288c007-9722-4555-b3f2-9e13a546fbe6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2bc36d-155a-46a0-8c6e-1adcc02e19cd", "sighting_of_ref": "indicator--e1c8ed00-652c-4cb6-8afb-350f9ff36394", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1286c04b-e78c-4c67-8eb8-df0478ddda1c", "sighting_of_ref": "indicator--bc5b86e3-9cf6-484e-a228-827d282940cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ab0c9f-7caa-4e57-81ae-a70ed9133d33", "sighting_of_ref": "indicator--e960de9c-45a9-4f9b-854c-280ede11018d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1632f7a0-eaec-4491-b8e8-a374181f4b0a", "sighting_of_ref": "indicator--9eefa2c8-8707-41bc-afbe-4af86c99c061", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c572132-1f0c-432c-b716-85f808daa58a", "sighting_of_ref": "indicator--30fa4ae8-f522-43bc-8b81-8cc08f035f19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15dccef-c537-4230-80cb-4925cd09f104", "sighting_of_ref": "indicator--4ea1a804-6b4e-4f00-860f-a7877e34101e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eba203-fe0f-4fd1-ae70-4264830c68ff", "sighting_of_ref": "indicator--8ce41e2b-14b2-4c2d-84cb-e21870aeadf1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874ef3a4-f1de-461b-8623-e0924ec3e2c3", "sighting_of_ref": "indicator--08ef0370-8c28-47c1-886f-18cfdf56b9bf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ef6087-f90b-4317-84cf-7e3c792a30ef", "sighting_of_ref": "indicator--b159e05b-3dfc-4c9f-80f4-3cb842845d83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce152a6-555e-422f-bfbb-14e0a73f1a82", "sighting_of_ref": "indicator--4dc7e9b3-7d43-4330-bf1b-bcadb39a4456", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221ab1c5-88f0-48eb-b2ea-949e70e79c36", "sighting_of_ref": "indicator--a1fcd97f-4df9-4b60-b37a-aeaeb50932dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1d37e0-0427-49a6-9769-eb891d130d17", "sighting_of_ref": "indicator--f8d697e6-40cd-46f8-a0db-af39b0ee4393", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43658b5c-d89e-4749-89e0-10c216952a3a", "sighting_of_ref": "indicator--7b8c2087-b421-4e41-8bb6-651e7bd06b1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc73968b-2e8d-40fc-9730-94836b907f2f", "sighting_of_ref": "indicator--eaeeaa2e-b943-40c6-8ef4-030a7ed006c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6c0560-1b44-4e26-9dcc-5f67b62a7440", "sighting_of_ref": "indicator--50726e95-bc3e-4b31-bd35-25d46a6f0f53", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec288dc-4b0b-48d8-988b-bd0ca29eaa1a", "sighting_of_ref": "indicator--7d2919fe-d92f-46d0-9938-3b7d56e5efb1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8d49f0-3296-436f-90f1-f8cf04f5013c", "sighting_of_ref": "indicator--ef096275-f71f-4978-8e7e-f236ce8c17f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a1a053-4e54-4d4a-b250-d9cd9e234e7f", "sighting_of_ref": "indicator--f91a47c4-94aa-4468-b7bd-6bce5e48668b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c1accb-c96c-4165-bd08-b845bcdac1a1", "sighting_of_ref": "indicator--173d0192-3cc1-46ea-a12a-ed50c137ff32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b20bf34-9de3-49ad-a186-bcb6b71c4889", "sighting_of_ref": "indicator--cd43e25a-3be3-487a-9495-5c746ab3bb67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306c24fd-6a0a-40b5-943d-fad7ef44be62", "sighting_of_ref": "indicator--8bcf8510-aac4-424e-b121-2dbf8f001088", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc69703-501a-4b98-9440-beb05c1a1480", "sighting_of_ref": "indicator--5c4dd284-0790-45b5-a151-9018fdd96bf2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f8946b-863b-4ede-a894-44e334ad72b0", "sighting_of_ref": "indicator--00fb57b4-5e02-475a-a948-3affe7b39980", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e07204b-948b-4ee6-962a-efebd10f60b6", "sighting_of_ref": "indicator--b5516298-4a79-402a-acaa-85a2dd285537", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b6e371-30a7-4a55-8fe6-070577f0dffc", "sighting_of_ref": "indicator--780aa005-a338-4ad1-9b00-22f92ede15c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d50101-4d7c-4c07-896c-b85733604822", "sighting_of_ref": "indicator--4add9078-4ac9-486a-bd4a-c082bd13e5ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea35abbf-c664-4d1a-824b-1ccc4d75254c", "sighting_of_ref": "indicator--18d23309-f45e-478e-9546-4e0010b18559", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aa0122-a2da-455b-a0fc-5ebe70cb4213", "sighting_of_ref": "indicator--96e001d8-ff7b-4a08-982d-7c1b109c1fd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1320758-97d9-4243-9b8b-824f3bbef979", "sighting_of_ref": "indicator--971d6331-c130-4ba5-98cd-f595d3c4f379", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73be254f-f1bb-4b16-b9e9-8f10c5ef9abc", "sighting_of_ref": "indicator--30c4c414-e40d-417f-b0d1-98ed98569e2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f8b925-7df2-493d-8e31-e3d1fe4be334", "sighting_of_ref": "indicator--8917db42-dfd0-4aac-86ac-87e984cb2c46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0321c7-32cd-45c9-b983-5352a0fab12a", "sighting_of_ref": "indicator--fb8994aa-2672-44e3-8024-2678d0f3c795", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545e890f-4209-4163-a6b0-7d235122ab61", "sighting_of_ref": "indicator--4700959c-07ac-4900-a6cc-f570efc54027", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb02010a-f0c2-42be-887f-d1c98ee1e406", "sighting_of_ref": "indicator--3da88829-b400-4598-9e04-361abc5e6b53", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e541e3-8cc0-48e9-8046-b6f97c5f92fb", "sighting_of_ref": "indicator--dbc44935-005e-4a61-b658-78e92e1fa98c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f3b035-c0cc-4c68-aed0-6b6a3a822c13", "sighting_of_ref": "indicator--a6e321a8-8e61-429d-9250-e9560776ffef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180ddb16-03e5-43cd-bb91-33683d806197", "sighting_of_ref": "indicator--72d671aa-5439-48f0-9112-1e4264cbed3d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb8b1f6-a1b2-4d8c-ae81-0c1e921eb552", "sighting_of_ref": "indicator--d001ae6b-04f7-47b3-9f2c-009f8bb76df6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc954bec-5e9c-4f51-92ab-668731c53835", "sighting_of_ref": "indicator--b8f74cc4-3ad5-47b5-801c-40480f43c139", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdbf711-a80b-43c5-8274-25dde556ead5", "sighting_of_ref": "indicator--5c66bcf6-90fa-45d3-a151-aaaeb99a198b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665f3d73-4f17-4414-ae73-534c7ee9fa28", "sighting_of_ref": "indicator--09963020-e5fc-4288-be00-b03e0a97f312", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9239583c-7d85-4a3a-b806-bcfa966458c0", "sighting_of_ref": "indicator--7a004a07-ee57-4685-9d36-e69dfc0c92ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd68795-6049-4d88-a69d-2807de739c6f", "sighting_of_ref": "indicator--2d1ad381-5140-4c4e-aed0-93775891b615", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be23eeb-22bc-4855-b0af-d8ea02fec172", "sighting_of_ref": "indicator--3ea78b13-46b0-4b8a-9941-eec6f0be3ce6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c326f8b9-a949-4c2d-982c-5208b994899a", "sighting_of_ref": "indicator--df9c4723-4452-421a-8695-6dd2955218fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7e5f65-4b84-4807-85cb-fbac8432c413", "sighting_of_ref": "indicator--b56eabea-164e-4bd6-acb1-b2c46f3b0ee2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecda5e16-adb0-4a2a-b5d0-cf4ffa8a0d55", "sighting_of_ref": "indicator--4ac3828a-0eb9-4d1a-bce5-0e237f65984e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8984f66b-339b-44c6-b699-c87bf0ee5515", "sighting_of_ref": "indicator--ab641768-026e-4f17-8ea2-025a5b49c152", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d37bf4-e34c-40b2-8e03-6833c1169e27", "sighting_of_ref": "indicator--7bbe2b0a-0d83-4fdd-9544-d9ef69b2e070", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eefc02-84f2-4869-be8e-2b85c799db76", "sighting_of_ref": "indicator--9617f00f-4a10-452d-b2b6-2012f77ec699", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0a4525-f5e6-4594-bf67-f592b1609e9d", "sighting_of_ref": "indicator--7493dfd9-4dce-42f1-9a73-7e177502b0e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c50950b-3479-4a95-a275-b636b6824835", "sighting_of_ref": "indicator--59d627c6-d115-4238-813d-01e555f997bc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eb8312-b9cc-423a-8181-b3fe6b4455d5", "sighting_of_ref": "indicator--2a3dfa05-7b50-4b3a-9154-e9d5e99dcd89", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb04f52-c1bc-45e6-a4a9-e71049132134", "sighting_of_ref": "indicator--aa77317f-4f1a-419c-aec7-a057f2c94b4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbd269b-e51c-4e9a-a4ec-bf97b260f705", "sighting_of_ref": "indicator--a984d4de-54c7-4689-a5c0-a92d9ab1036a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2f5bac-aed5-4819-b8da-de836296eed6", "sighting_of_ref": "indicator--7176cc79-4161-4067-b143-923ff9bcf0fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665939e9-9ae8-4dfb-92be-cf79a15b8d57", "sighting_of_ref": "indicator--dc1b45e0-c713-4641-ac34-5a2bf284b0a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc30acca-348d-46d3-aabe-f119b3ed48bc", "sighting_of_ref": "indicator--1d9d31c1-0653-443c-bd63-6e64912c44a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e3dbfe-15dd-41f4-a912-8ff1b320322f", "sighting_of_ref": "indicator--e78f934a-d797-4bbf-a964-9bcb9a7fb8df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5c9bf9-7835-4de0-853b-ca4001de5908", "sighting_of_ref": "indicator--db5667d0-c0dd-4a6c-bf91-5d7a01e08086", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b2a025-ffb5-454a-9efc-076d0bb52955", "sighting_of_ref": "indicator--efd0f060-9fc4-4e07-8d51-b62ccecb61ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcc2ec0-e3f9-4ac5-b883-261db7d86b49", "sighting_of_ref": "indicator--a4fbac0a-690c-42aa-b000-93abbbac9dc8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb50488-732d-4f6d-9cba-898f43c7024e", "sighting_of_ref": "indicator--9d95e64b-2553-47fb-bf92-a3be10a33d8b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0361cb70-6aac-49d6-a375-b9dc5f206932", "sighting_of_ref": "indicator--845d6a7f-e222-43d5-8809-d145c455d050", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03dd906-58ea-4049-8af5-1d826badafbd", "sighting_of_ref": "indicator--9bd39ef5-1a5a-48f9-bb19-9cf2b6efe3f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc93bf38-1c24-4d50-8e23-ef860125d909", "sighting_of_ref": "indicator--8f10883c-f72f-422b-b4e4-54c81f9ce642", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dfc676-900b-4fca-a242-0e64b6a73e71", "sighting_of_ref": "indicator--ac29a5b1-9cb2-4710-b652-2f0c99da14eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000ce4fe-f097-4032-ac10-bbf382e13832", "sighting_of_ref": "indicator--4054ae7f-df11-401f-8fba-1d7d6818fb18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6719a366-8947-44b8-8295-90efe86317cf", "sighting_of_ref": "indicator--d0e20ba8-e06f-4d77-8683-08552103f5e9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f54484d-faa5-4836-bd64-91a62cac6d69", "sighting_of_ref": "indicator--44f04e14-42bc-400c-941f-2fb3e3dbf5c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70f8c41-9f73-475f-b7db-d2b97b7df04e", "sighting_of_ref": "indicator--48dba285-801b-4a98-9c33-877a6433bfb7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1d7556-483d-4100-a54a-6007884de441", "sighting_of_ref": "indicator--c20b9966-b754-4947-a886-5030af31edc3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c148c6-0160-4b01-9705-df354b69c6de", "sighting_of_ref": "indicator--60eb84e9-991d-4f38-902c-f3300dc41fad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a273321-9acf-4e26-bcc6-ab458f84a1d2", "sighting_of_ref": "indicator--c817303e-f636-4a2f-b503-c7e08465f44b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84be20c7-9213-4288-9aa0-6b2988ebb2c4", "sighting_of_ref": "indicator--226654f2-cd12-408f-a56b-5d9801e851f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292be84d-cbd8-4320-ad0a-edaf775e3f7c", "sighting_of_ref": "indicator--5446ed7a-c12d-4329-93e3-425db26ee0e2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa14a931-2092-4220-9264-8a6d94d822a8", "sighting_of_ref": "indicator--b6a69c66-21f8-4d6b-88ed-4ebcd16a37d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c27136b-c647-48a1-b13e-dbf13831c673", "sighting_of_ref": "indicator--da999dd1-d13a-4fd7-8379-1ae0a7f17344", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88682472-216c-48ac-bea1-db111dab4f36", "sighting_of_ref": "indicator--4b108e16-3765-4cfd-b70f-0ebb4239d1fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58dfbd4-df44-4f3d-9dea-9d8f4209bbbb", "sighting_of_ref": "indicator--bd41f741-acc0-4794-8d60-f8bc5a25d489", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a658f7-aa94-42ae-b1ff-0d672f8be09e", "sighting_of_ref": "indicator--af90b222-bb1f-4288-85da-7d3fbd302ae6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6827f399-8576-4e72-bc67-5fd5e8bce574", "sighting_of_ref": "indicator--09c02b1c-97b0-4756-852e-d5e4bfbe5733", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45ffbf1-7b24-4e4b-8a5f-c583dd6dc853", "sighting_of_ref": "indicator--bba2c7d3-884d-491b-9904-85a7b46a77a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e6c142-4004-43a9-9df5-1edc863efcbf", "sighting_of_ref": "indicator--be1068ed-7034-4909-9dca-c322195147c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6feb5961-70db-4736-a194-849d9c6fa1d1", "sighting_of_ref": "indicator--025dcecc-b390-4eaa-ac47-d60b81417fd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef95f057-f0de-43a4-91f0-2e96d2e0fc8f", "sighting_of_ref": "indicator--3cb15820-c0f7-431e-a193-a6648dbfc806", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577e0a2e-33a2-4056-b2dc-cddf4b994717", "sighting_of_ref": "indicator--26e140b1-0a8a-45fb-9931-2037cedd601c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8a31d4-31a6-4d8e-8ab2-97e0e56d3759", "sighting_of_ref": "indicator--dcd17349-a59d-4ecc-8934-1224036d8417", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a12548-6002-4318-bbb3-d95de721f5df", "sighting_of_ref": "indicator--5df6c750-1ac9-48b2-a42b-878f906e09f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47eb94e-ad66-40be-a96e-f1678d708a56", "sighting_of_ref": "indicator--49198216-ece7-4204-a2e5-bf84c112ad69", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7556c3c-0f54-4c2c-9459-41dddbaca8e9", "sighting_of_ref": "indicator--bb053c16-ac7b-4ed2-8c07-4418315a0785", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b57f43-d5c1-48e2-b2e0-3592b8de5a83", "sighting_of_ref": "indicator--b828e34f-1460-4ef0-88a1-985ed046b558", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0547221b-d658-4f39-b7bd-f08a81117924", "sighting_of_ref": "indicator--aa475e37-18a7-4c4f-bd57-3a24bee40873", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0f96f4-d1e2-48b8-8579-bd40e3114692", "sighting_of_ref": "indicator--5bdbe827-5659-4388-aa36-b3ce6b416b03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de9c288-036c-4361-8e5a-c7789cb732b7", "sighting_of_ref": "indicator--6f1f18ba-96c8-47cc-b0f3-33d5e95be869", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5c6d1a-e4d2-45a5-94b5-c8747e6f763d", "sighting_of_ref": "indicator--a0a9e198-71d8-41b6-a75e-abfc39b25ca1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30182cc3-6dcc-47fe-ac0e-5e72ab483ab8", "sighting_of_ref": "indicator--d6f5bd26-662a-484a-bf30-b451a1780615", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8578f614-0ad7-4e2c-b27f-2722950a9f9e", "sighting_of_ref": "indicator--5d5a5a8b-4fdb-47a4-8b07-90430529fe1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6c9cd7-246d-40a4-a493-aac2a40dd941", "sighting_of_ref": "indicator--18ed5fd2-7e2c-4e09-96a9-9faea19ca0ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec5bc4b-f13e-44e9-8533-becc5ea5361f", "sighting_of_ref": "indicator--750816a9-21b8-41a6-ab7a-85592e8cd53d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5000ef75-124e-4b82-ab45-e7fa38c1f294", "sighting_of_ref": "indicator--0922ff82-87c4-4f4e-a4fb-ed17ff4f95ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63ca0a4-c687-4efc-be92-23a0580a38d5", "sighting_of_ref": "indicator--25555d7c-2262-427b-bd39-2746f9dd3cde", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abf7247-0936-4655-9502-3989c2b1787a", "sighting_of_ref": "indicator--a0ce3ac3-ecce-4e39-82af-ae0afb52d5a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1184b683-21f7-4132-a764-d49fd98f925d", "sighting_of_ref": "indicator--bc52ce34-702e-4dd9-8904-8144d40415f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a8dc5-9b09-4fa5-a14e-8612b4db9927", "sighting_of_ref": "indicator--f0def953-3d69-46be-953c-2252529d5304", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37e13c6-feb9-4e9a-88b8-cd0b351f0167", "sighting_of_ref": "indicator--52e97741-d700-436a-a6df-f8d283d33e81", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22387a74-e08c-48dc-a9cb-baec28091ba2", "sighting_of_ref": "indicator--ac2face8-ce9b-43fd-9b79-29ef744e3df2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1110a4-6b6f-44f2-93c5-c2ea00bf2d37", "sighting_of_ref": "indicator--351e49b2-fd2f-48e6-b3d2-e8dd7e5c69f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a15623-f983-47fa-bdd8-9595277760e8", "sighting_of_ref": "indicator--03b3343f-e81b-4060-b97e-cfe3c5589940", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765f6926-b296-437b-bd0d-d56c793c2128", "sighting_of_ref": "indicator--8b729b5e-d9e6-4539-9715-f30af8512103", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb49e10c-467b-4964-98ce-48e04a1f1b75", "sighting_of_ref": "indicator--f59ec7c8-9307-49e9-8844-108a0e4baac7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508dccd0-b038-4f16-a420-b3574f3d17b1", "sighting_of_ref": "indicator--9149452c-c5f2-4261-9332-69bac0930341", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51974b7-83b6-4ad7-bd46-ff2efd29a5e8", "sighting_of_ref": "indicator--b3152314-e3ed-4b27-a529-6a9fb66274ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f53e4c-d2dd-450b-8042-15b452b882fb", "sighting_of_ref": "indicator--5222258f-cc31-4446-9fb8-bcbf2f2e7d93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbcbb85-0e51-4526-8118-e3e1908e98bc", "sighting_of_ref": "indicator--9d031891-0a0c-4687-ad58-c7bc300b030e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c945a368-1fd9-431a-8b4f-f24e6efa6786", "sighting_of_ref": "indicator--f75dae30-2d1d-4328-83a4-953758218043", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d9ecf2-4af0-45d1-bdf4-0463f16b24e5", "sighting_of_ref": "indicator--01b1cf47-032b-4425-842d-10edf364ff1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4846b537-2981-4b0d-85fa-a79c0e3cf56c", "sighting_of_ref": "indicator--0097f1c4-bace-4d18-af88-d64ebe175b0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6d2083-0d01-4a29-9eef-54d5deda5d1c", "sighting_of_ref": "indicator--9bf6a9d0-eafe-4a45-bcfb-1111a8c4ee38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6067c513-e831-4216-b41d-3030ebdf4a84", "sighting_of_ref": "indicator--976ab418-3bb9-4c75-8871-19732b5d0755", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fed360-b448-48a0-815d-560348e7b537", "sighting_of_ref": "indicator--650544e8-7874-4c67-9164-f490fefd1cac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37569b6f-89cc-4a5d-b5c4-f10784216e48", "sighting_of_ref": "indicator--853523c2-9834-414f-9f4f-f26ce570715b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c2c188-ffbc-4d71-9d73-bafc9698b893", "sighting_of_ref": "indicator--65d68e6d-0253-4c91-93c9-b92f4bb588bb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a523ec9-2ea7-482d-a678-5d998cb9c925", "sighting_of_ref": "indicator--4b184cad-349b-4776-9e25-e08e51ba51cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf8e704-f143-4aa9-9187-351cf1cdf17b", "sighting_of_ref": "indicator--593199e5-dd33-44d6-8103-7c63fec17e09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29d375f-ceab-47f0-bb5b-9c2a65200716", "sighting_of_ref": "indicator--170721e7-feb8-4007-bd6d-976f67e78bcc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a21b63-1747-4db4-9718-841878207026", "sighting_of_ref": "indicator--192bd228-986c-44c1-bb36-24401a1738f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bcde8b-3c1f-43eb-b3ec-f1b1b0cd6ff5", "sighting_of_ref": "indicator--56c4ac91-4ac8-4ba4-a84b-028f31a0e523", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f072f653-e38f-4f87-b484-876b0b99ceb8", "sighting_of_ref": "indicator--4e12fb7a-f235-40de-b9f4-78bcab4cf1af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6444bc4-69b3-45fe-9075-f378e0873743", "sighting_of_ref": "indicator--1d1d5d37-837a-4d3e-8f68-5db5276a89e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1299d7b-0ad5-44d0-8398-9f782b4a9c95", "sighting_of_ref": "indicator--792862da-bba0-4ff3-a36c-3e39004ed518", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3bf4de-cde7-4b67-9248-62e79e8d32ca", "sighting_of_ref": "indicator--44a94cb9-9a23-494d-9233-c39a1b21ecd1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a06793f-5747-4251-9729-dd6c9ceca3ef", "sighting_of_ref": "indicator--111f4a3d-18e6-4567-bdfe-5511fc44a1ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6f7368-0fcd-4c12-beb7-1dfd1285b461", "sighting_of_ref": "indicator--66f09129-b283-42aa-94cd-942571a09811", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c592cf3-9afb-4be6-bd4d-e21bfab3c840", "sighting_of_ref": "indicator--e8b332d8-9aa5-41fe-bd93-6259679ae970", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3d6cbc-4e48-4c36-aff5-bf8ab7365e8d", "sighting_of_ref": "indicator--90741727-3cf0-4b23-b4b4-9f89f20ab7cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb728c6-1a57-4aae-99f0-f88e7258def7", "sighting_of_ref": "indicator--baf9e49c-c146-4d4d-a6a7-c9004631a999", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d043e8-75bf-4288-b880-a6124d7fde89", "sighting_of_ref": "indicator--2ae55b7c-601d-464b-b967-7ec11065fb65", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23effcc7-9698-4e00-a2f4-eb6bc39fa65a", "sighting_of_ref": "indicator--96fbd21d-0480-478f-82b6-3b01d2b3c252", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17cd2ab-0622-449f-99d9-32bf5a837dc5", "sighting_of_ref": "indicator--a8ff96a4-fc89-4d4c-94f1-443003ce46f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e820030-1df8-43ab-b12b-313749313de7", "sighting_of_ref": "indicator--483d440e-b82f-446b-acba-61868a2f674d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167b9d0e-0be5-48fe-a7af-5cc3f65c36e5", "sighting_of_ref": "indicator--4b9e8a1f-3390-49f2-ad14-321d92c62271", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b18248-f470-47dc-a8b6-1132d059f945", "sighting_of_ref": "indicator--531f3867-7e38-45d7-933f-cefb69bbdf21", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5bc887-783f-4023-9ba6-f37ce512363c", "sighting_of_ref": "indicator--c37552ce-6f9d-426d-a12a-e4e13058f1a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443def10-541f-4d24-ac25-efc55bed6da9", "sighting_of_ref": "indicator--60ee60ca-bf91-4fa6-be63-1db269f065e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483dc413-b822-4eca-a853-dc5a4e1cb1ae", "sighting_of_ref": "indicator--2d5dfe3a-0590-4003-a45e-febc59057e67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bc43f0-65df-49b1-8cb0-b27c0d80457c", "sighting_of_ref": "indicator--d869974a-41c4-4b5d-b3c4-bf66cab665aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2246fdd9-985a-474e-b971-21a510e6549f", "sighting_of_ref": "indicator--559df7c9-c299-450c-8cf2-ae542d28ac78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66391bf3-7372-48b5-bfd5-058c248e21e4", "sighting_of_ref": "indicator--c8d3f798-0c8b-432d-b6f1-3ebee20c0fa6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648e6f94-3c56-4d4e-b1e3-7d6c8cd91b42", "sighting_of_ref": "indicator--db47ce80-6526-4388-9668-591bb0ac63c2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15191e01-93df-4e11-aa46-c81ff586ae72", "sighting_of_ref": "indicator--89efc32e-e1db-4c2a-bc81-c27092c83c76", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba1db8c-4bbc-4688-aa94-d160aa28c751", "sighting_of_ref": "indicator--8ca18a71-c51d-454b-8d51-1f2a078e2f5d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feec8bd9-dd9a-4987-a3be-5ca81117c3b6", "sighting_of_ref": "indicator--78565d91-948c-4b93-9b67-4d6e347be1a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3685ab56-59ef-4e10-b74d-a52635cb88fd", "sighting_of_ref": "indicator--ac02099e-c874-43a5-8f9f-c8f331a7a5f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490cac6c-569a-446a-b071-036c60477967", "sighting_of_ref": "indicator--2ab95064-1bff-4fd4-8e94-ecdc5e86ed42", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db8497f-d199-4d1b-98d1-1adb9bd2d86c", "sighting_of_ref": "indicator--4e1c9c32-f478-4b7f-86ef-3a6ca10375e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd242210-ef39-42d7-9008-87ae19ba8b3b", "sighting_of_ref": "indicator--5da2d705-f6c4-4cf7-835d-1d0022b6fd6e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f78897-983b-4977-8f78-663d20d14c10", "sighting_of_ref": "indicator--6785c89a-b67a-4cc7-bc4b-4821c2e5ec57", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d34ae5a-b2ca-4884-a199-a9f630742172", "sighting_of_ref": "indicator--ef1fde6e-8ebf-4f57-b020-c9643447b733", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c617eba5-ca0d-476e-86ba-d536f52b659c", "sighting_of_ref": "indicator--70857290-4f1b-453c-9441-3146f983b40c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bdb7f8-8072-4930-a858-67dfc6e06c96", "sighting_of_ref": "indicator--98f2ad1e-49d9-4cc1-9b78-c274ba4a25a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b39c88-7f0d-431f-b76f-f26d4bc997b4", "sighting_of_ref": "indicator--d32c40c6-2510-4c21-9cbd-7bf8145c3f31", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d966988-4677-4c51-aae7-4cdf3b086ac5", "sighting_of_ref": "indicator--7fb6ef52-598f-4bc7-9e00-9d805c602940", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d096a02a-fa9e-4f8c-b5e3-e909f0e9c3aa", "sighting_of_ref": "indicator--b8a9d4d5-389d-4ecf-a0ba-77fd8bc06042", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a95446e-5715-4701-a3b0-4fa5b49e8573", "sighting_of_ref": "indicator--cd1acaa1-ba65-4f6b-9b69-bcc662113903", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98324c31-8126-479d-89ec-e0801c559a3d", "sighting_of_ref": "indicator--e9648ea3-e26c-458f-b783-c5610d039a2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b00398-3d96-4161-97f4-a34c7c5382fa", "sighting_of_ref": "indicator--8999ec52-de1e-4195-ae14-713ac7dea3cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda3ae0f-dcf2-49a6-85ad-016c97430632", "sighting_of_ref": "indicator--02cc9999-9427-4e73-a5a3-7e92b60abfbf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba50f92-d709-42f4-8308-a93e316feed7", "sighting_of_ref": "indicator--b48c9544-3864-44bd-b744-95c38d3febaa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a1d28a-91fc-40ab-9412-861516258be2", "sighting_of_ref": "indicator--a83db6ad-4eec-43c7-aa87-1391656787f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f49e33-1a5b-4c79-8f72-709e02034486", "sighting_of_ref": "indicator--a8f3a587-4bbe-4ea0-9198-d45232e2132c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7b626f-2d9c-4425-9b6a-a4f8151eba93", "sighting_of_ref": "indicator--b049863e-c45b-400f-a68e-3341bfba7119", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9599da1-dcfd-44da-96fa-bc71d8d32bbe", "sighting_of_ref": "indicator--9cf8b74f-31fe-419b-9c4f-a19d7e6312f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd395414-a3b2-4094-a700-b90d60a59e73", "sighting_of_ref": "indicator--20196377-f331-4c3b-b972-0debd1d90a22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e37bb4-8646-46a0-952b-b7b771890339", "sighting_of_ref": "indicator--0ffeae4d-15ad-4384-bd18-60db3749e1ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a91000-12c3-44a2-badf-fb36d1ca6b22", "sighting_of_ref": "indicator--86c86373-abc4-428f-a35d-6d565d0f693e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94e5641-030a-4349-9b15-2c8b7dc09651", "sighting_of_ref": "indicator--2891192e-78de-4df3-a2d2-27ed3414d38b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a87665a-9748-4f61-bdc7-d68e23d74738", "sighting_of_ref": "indicator--594926c7-7d8c-4cd7-a005-e28c0d777266", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be151388-e870-4b81-b197-88ee7579f2f2", "sighting_of_ref": "indicator--1a7e35e7-1351-40ef-8d4f-fcd8b9538496", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099d761b-0e61-4878-b099-2cf9a3a2b248", "sighting_of_ref": "indicator--4b0a68a7-33f2-47d7-89d0-f018b24c5b0f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cb6c7a-27d6-4593-9855-b47ab85347db", "sighting_of_ref": "indicator--4e3e0653-6be0-4698-bdef-81eaded154e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82923a9-a492-4891-b19e-1fbf05d5c5c2", "sighting_of_ref": "indicator--f3f11f73-81a3-448a-a781-d9778780490f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50263c8c-ae50-4227-bb18-9c3634a41ff3", "sighting_of_ref": "indicator--468e898a-088e-4905-8c84-2a7a75eb0f4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8db632-01a6-4863-8da3-63e555a6ffab", "sighting_of_ref": "indicator--09f783f1-f33f-4815-ae2b-f630b6b83d18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d264393f-9a15-4361-8432-caa016d8c310", "sighting_of_ref": "indicator--13f5736f-ce82-438f-bfc2-d3310333c420", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a4b1cf-966a-4182-a3e8-9dc97f85ea88", "sighting_of_ref": "indicator--e5bb2525-4f60-46f7-b246-027a94522021", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21868296-56e4-4762-9369-6c14ed8ccdd3", "sighting_of_ref": "indicator--4b634e34-6b85-4501-9ede-17babd1f38f5", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add6739f-4c87-46c6-b973-d35b637a1fc5", "sighting_of_ref": "indicator--55776b8c-af2d-4088-bc27-551ac919fc26", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e540aa9-a493-4eb1-a6b1-91e9a8831ad0", "sighting_of_ref": "indicator--a6c294b5-9bb5-4ac6-9977-f38f0f41fbb0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ae62c8-808e-4158-8548-c29abc830d34", "sighting_of_ref": "indicator--3eafea0d-62ec-47bb-b7db-54620443d868", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d6dcd-30fb-4ef4-b4df-aae848953dd4", "sighting_of_ref": "indicator--55e3c244-eb14-48c6-8253-7c3dbfbf8053", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f637f053-4703-4106-a189-7331b0a9f086", "sighting_of_ref": "indicator--2ffa71f1-9993-4aa4-a1fa-b89e104cba66", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc0c9b1-13b7-4df8-ad6b-8810711952ed", "sighting_of_ref": "indicator--ba1f8a19-6409-4869-af58-ab457431107f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3da36c-8f61-4c36-a9d1-0e4c619191fb", "sighting_of_ref": "indicator--73cbcdb1-b58a-4835-a737-58bcc3d9c09c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5faca652-9d13-4a59-8a4f-4b56957e6d03", "sighting_of_ref": "indicator--c17e3002-83e6-4d00-8342-8e5e254325a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b2dccf-fdbf-4f7b-bd74-0b58f5389f47", "sighting_of_ref": "indicator--40fa1faa-52e3-4b6a-8233-3086d0e70bb7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2007c1d0-dfec-4688-9473-89de83b9d01c", "sighting_of_ref": "indicator--65a88a7b-bcd7-44b1-baaf-eb561f117e6d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181db2f9-5f85-437a-84ab-1b3a9d035893", "sighting_of_ref": "indicator--2cab7104-f8d1-4d8a-85d5-b1af369eaeee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2df02b9-e5fb-4c1e-b2b5-f78deee5a6e6", "sighting_of_ref": "indicator--df64a027-ffb2-4c77-995c-8f255e181fda", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48798846-2138-4c3f-85e1-16bbc1c740e6", "sighting_of_ref": "indicator--5f0b301e-2f22-4e4c-be06-1d0f4868519f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de86fa3-26fc-49b5-a3ab-6e94a5b9a98f", "sighting_of_ref": "indicator--d7a56008-d6ed-4f55-9200-dfa2ebdadad6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ba6d59-3b36-452e-adb6-2cd22db2a89f", "sighting_of_ref": "indicator--ce5cf5d5-dc1e-4d92-830b-e8dca8270110", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff12bae-b137-4689-80fd-e3ed22c52289", "sighting_of_ref": "indicator--ff008c28-274c-4852-834b-64820eda28c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f54346-1f44-4439-a115-f5ee14514e24", "sighting_of_ref": "indicator--70c7a129-c13d-4dbf-b0ec-d662f2daf534", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ea403b-fd75-4d92-93fc-a64a89d0d8f5", "sighting_of_ref": "indicator--9364ebf5-7f51-40dc-a2c8-c718d44f2ea3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b70f6ed-9b95-460e-b767-96e1890697a6", "sighting_of_ref": "indicator--1e7e48a4-705e-40f4-b749-853e13965063", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f258b-2e0e-4ab8-9912-5d0176be9590", "sighting_of_ref": "indicator--3d62323c-157f-43a0-80fa-412a0b085156", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0f1068-374e-4861-b2e8-70ac9154a401", "sighting_of_ref": "indicator--fd52a5bc-231a-48ff-996c-079336cebb27", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05518776-a6af-4a62-8e83-d3e21750f3cc", "sighting_of_ref": "indicator--d348bb43-3741-46d6-be33-d18dcd3c4a50", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca62e3d1-8cb5-4660-8937-0466b6b64113", "sighting_of_ref": "indicator--f6ccf0b7-f08f-4d49-ab55-77db52fd8d57", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca270dfd-f259-4ff7-9438-6b4ab4b96c48", "sighting_of_ref": "indicator--20b1c716-c199-49b2-9935-22c4992e5bf3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb84d2a-bedb-43f3-ab07-48b6a3acfa92", "sighting_of_ref": "indicator--adac9224-da9e-4964-aa06-e4d31c05bc37", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a66b19-775c-4199-bb00-dfd711e8b82f", "sighting_of_ref": "indicator--85c25a42-6c2f-4f32-9d7e-2b22dfdc40d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccf0233-9fb5-4925-ace7-ce6d0ef88655", "sighting_of_ref": "indicator--d9afe4b7-8bd0-4417-bdbf-b4896a4d2476", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bf143c-eb3f-4338-86cb-36ee9d807a6f", "sighting_of_ref": "indicator--6e58dbfe-e3ef-4d36-ac2f-02723da43eb4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5225eec-0dce-493a-9010-ffeda972caec", "sighting_of_ref": "indicator--525781ac-9777-4c6d-941d-84b6cdd8fee8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866b641a-5c46-41ad-8c0b-87f2b5e3c455", "sighting_of_ref": "indicator--7a90e492-92db-415a-b130-694b947f2d41", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d760f858-6b61-4b1a-afdc-3c01a47ced12", "sighting_of_ref": "indicator--16eb2307-5cc8-45ec-9d40-6ad501a4bfdb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fe9a1c-6b00-4347-ab51-832fc6a05685", "sighting_of_ref": "indicator--7bfb8be8-361f-4b9b-8d70-8d4ba42df868", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a1b6bb-18ea-405d-8c4d-5fe6791dd95a", "sighting_of_ref": "indicator--d170640d-3668-423c-9beb-f5a64cc84c18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ec06bd-cfe5-4ed8-864d-3f43e72f4e36", "sighting_of_ref": "indicator--8b754654-31cf-4f62-bb39-af29d8954b7a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68fa4d8-eac5-4189-be65-f102e3970a03", "sighting_of_ref": "indicator--fa3f34ce-af78-4716-a169-90f4da9664e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace300ec-6c9d-490f-88cc-981179755713", "sighting_of_ref": "indicator--d6bdbdcc-2dcf-4f85-8a7a-dddab210b84d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f412608a-6570-4b12-ba23-d13b47a2bfc3", "sighting_of_ref": "indicator--7c42eed7-c29f-4fb3-889d-7ee5fdc1f5c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9c7f32-dddc-4fe3-b96b-2ea3a4f9ae03", "sighting_of_ref": "indicator--36eb9883-76b1-4e25-a36b-18c8b2360f7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fda66dc-fe48-45b8-9145-4a37eb619786", "sighting_of_ref": "indicator--aeafd9f2-bd5c-4591-9e30-7308738de3e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958854f6-a8de-457a-a1c1-bce53e568ce1", "sighting_of_ref": "indicator--a344b9b3-d427-4fef-a3a1-0eb948800c92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0e598d-9743-4eb6-8217-34e1247c878c", "sighting_of_ref": "indicator--cc2c310d-fe67-4810-b142-e4eb1a0496fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe78d10-56de-418d-98e7-8483198c7102", "sighting_of_ref": "indicator--3e68ec95-9daa-498e-9642-31b77ed9fe0c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128d0ec8-aacc-4873-b58c-9f5dd644b385", "sighting_of_ref": "indicator--23693781-9688-4467-91b7-d732de002c16", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d486232b-ba2f-4e2b-831d-3f7ccaa3226a", "sighting_of_ref": "indicator--aea27a7a-e6b2-444f-acda-72a6a4c1fff6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1297ed32-05ec-419e-a67a-f6ea54e6c9ea", "sighting_of_ref": "indicator--bdc5679f-7496-4ed9-9a8b-8b9526ea0912", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c572550-746a-455e-8a53-3930f089aa92", "sighting_of_ref": "indicator--48b989d4-5521-4c55-adeb-13eebfbf0743", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4150ce90-0a50-48ea-99ad-114ce7120902", "sighting_of_ref": "indicator--fd7169eb-023a-4dbb-aae9-d04e3e533eee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1409eda1-bf33-4d63-83f8-1242cd88ea4d", "sighting_of_ref": "indicator--090ab466-c245-4166-8346-0cce7f46262a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6528d61e-01dc-4069-8c01-d4bce4bf61be", "sighting_of_ref": "indicator--859f00c4-b3a6-4fce-93f3-d72f149f8af0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2400bd0-6ca8-4748-b4b2-35a5b16b76f6", "sighting_of_ref": "indicator--69a0085e-4d1e-4125-87a4-6241040d697b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9990ecdb-32a9-4056-86d9-3091f6c38007", "sighting_of_ref": "indicator--b0773033-2056-49ea-82a4-638cf6e5ba90", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb427e6e-3b21-45de-8123-4d3458135a9c", "sighting_of_ref": "indicator--5d57b20e-01aa-47c8-b86b-277a8c646cd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3315c7a1-b6cb-44d1-8d8c-5da6f683d528", "sighting_of_ref": "indicator--f4546a5c-2a63-467b-9ad6-924157688181", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6d7849-d446-4132-9db7-49fc8de4fa72", "sighting_of_ref": "indicator--cecd17a6-fa03-4234-b792-0829b5e7e8e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f467d7b3-b314-40b4-bee6-a95e1f19f94d", "sighting_of_ref": "indicator--c9673881-187c-4ca7-bd43-803d9b2c07e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b44a58-812d-4779-913c-13e6b38f0d35", "sighting_of_ref": "indicator--4f89e77c-b882-4dab-9df7-9577c04d53bf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120a0ad6-514d-4f07-8470-50f7eaab6af4", "sighting_of_ref": "indicator--a3f92a7b-8d51-4bce-954e-c10ed1cd6d4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f420c0e-4413-4d02-b518-6d036986328f", "sighting_of_ref": "indicator--9bb5e283-bb67-4eea-86a3-ecd6cb11d226", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a249ef-89e0-4304-bd39-a8ba68bad049", "sighting_of_ref": "indicator--255114a7-b8ca-4d09-894a-7bb88594f4ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9a976b-b220-44ff-a257-5db078fd4d72", "sighting_of_ref": "indicator--5a25cf7a-aab3-4646-b133-1632df305610", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3f0fec-0a5e-4a59-9a0f-0afeab1068c6", "sighting_of_ref": "indicator--75a68b96-baed-4e1f-a475-07d2d2e87d22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07659373-8807-47a0-b272-e8a1d6cfc860", "sighting_of_ref": "indicator--2a548e50-c34f-4e22-a12d-3f2dec3e438c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3d5403-c718-4edb-b55a-d6730e9dd15a", "sighting_of_ref": "indicator--3222d44e-e754-4233-960b-3e92bedc3f82", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2152e3df-e33a-40a8-b659-7def4d31c9dd", "sighting_of_ref": "indicator--973a5caa-2924-49fd-b9d2-d337ea9b50ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe15e19-b75c-42a3-aa31-b6798ab48e02", "sighting_of_ref": "indicator--26e0474e-0e51-41fc-9e52-d6d9cb169dc5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4acb50e-9e17-49a6-a8f2-98f39a877f59", "sighting_of_ref": "indicator--128970af-5890-427b-8839-d35222c7ed61", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182dce70-02c2-49a2-8092-252fdf94985f", "sighting_of_ref": "indicator--1e484e67-a3a9-4e56-b1fc-807410b40c32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae07af1-59ab-4682-b8fb-a7a501a938fe", "sighting_of_ref": "indicator--852fd55a-2a1f-4f1a-8680-12a33268a285", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4e5039-914f-458a-a741-ed417467003b", "sighting_of_ref": "indicator--c346348f-a266-4f80-85cf-3893f35875c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12756bcc-a89c-43ea-87eb-b15eb8509cf0", "sighting_of_ref": "indicator--47fc4ecb-4a1c-48a9-8e1f-4a1d113d43e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6579b080-3ed0-4b1b-b87f-c687d420dd70", "sighting_of_ref": "indicator--13df6513-bee1-4e0f-88c2-c0f77f31426b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f013d0-d60a-4d79-8744-77550dcd15e7", "sighting_of_ref": "indicator--22c225d0-377d-4a29-a392-b8b92657de06", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2575db-44b1-48fb-aeaf-1cc106b62472", "sighting_of_ref": "indicator--57819469-733d-4dc6-854f-e78eb605e442", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f948f0f1-1ac5-4cf2-8d3b-4a16981edb90", "sighting_of_ref": "indicator--1053fbb9-0c60-41b5-8624-cf13d4511475", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c5693d-1649-452b-b764-619fca15e71c", "sighting_of_ref": "indicator--82bd4cf2-b92f-4bb1-917b-b0b7f6352d4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbd9ad0-c2e6-478c-8091-f3296037a64a", "sighting_of_ref": "indicator--325dd918-d581-4f13-b09f-aa0c32cdb414", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9bb3a3-3f07-4659-90f5-c8044e840691", "sighting_of_ref": "indicator--830972d4-2fd2-449d-becd-14080ce4c0da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d451498e-43d0-4653-8f9d-59ebae3d5f5d", "sighting_of_ref": "indicator--190d06f4-d1b0-4e65-91fb-41df7fe72c27", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c730f8-83fd-49f3-8ca0-7c51759c2392", "sighting_of_ref": "indicator--9170af72-b016-4ecf-87f7-d9df1afd9454", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c815c18c-1fe1-4b8a-b981-788d319b8b55", "sighting_of_ref": "indicator--1882e5fc-cbff-45d9-bff5-9744c2e9db06", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c4c481-3218-49a4-bb98-1803a274b644", "sighting_of_ref": "indicator--b1a427de-13ce-480b-ace2-91480a07aed9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1440a7c-3358-483c-b873-580e825fb3ac", "sighting_of_ref": "indicator--364c6f83-c3d6-4f03-8646-cd096868917e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2da7d4c-38a5-4dea-99fa-66c22d054a87", "sighting_of_ref": "indicator--85550318-daef-4c17-b511-f09a6a1f61ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb37ddee-d7a4-4a60-9d9a-f821a5bbc7d1", "sighting_of_ref": "indicator--5d44222a-3404-4d1c-9afe-3aade19d3011", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfdb75f-2e22-4f6c-81ff-4b1d35ff384d", "sighting_of_ref": "indicator--5bf79ce9-421f-49ca-922c-9a45f9c99401", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a86ab0-d3df-4423-98c3-f1eaa1c73e5a", "sighting_of_ref": "indicator--f9817136-e025-4d1d-991b-749ee0af28da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f1a2e5-6f32-490c-aae1-71000df48444", "sighting_of_ref": "indicator--8581f204-5b16-4a11-b6f4-2245c3d59f31", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d76572-0e8e-4139-9569-0b623f7bc9bb", "sighting_of_ref": "indicator--26543991-e405-4543-8c69-e1ca617e3013", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e2e36c-3c05-4c6d-a91c-29059a3a44b4", "sighting_of_ref": "indicator--2cfbb171-8cb7-40ce-a2d2-00250598d4a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00a888b-2607-432c-8e3d-c338bd2c04fe", "sighting_of_ref": "indicator--56f9b7f4-ebfe-4f4b-8eb2-d9c538a7d542", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f6adc4-32c1-41bf-a6e0-266c64b2f455", "sighting_of_ref": "indicator--38f0f573-6ba4-46fd-aceb-9d7cd93bd6ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b5a54f-07c2-49b3-a223-e68f6ca650c6", "sighting_of_ref": "indicator--591bc691-e015-42af-8441-5ed430629247", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85980b61-6930-41ab-b21d-91bfd2aa11dd", "sighting_of_ref": "indicator--df9a1ee1-9122-4ac1-906c-e25bd33142f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788f102e-9af0-464f-a153-609756700278", "sighting_of_ref": "indicator--a5ee557b-314c-49ed-b802-0c0e5cdb1144", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b23ff4-ac87-4f01-86a3-c9a67ac335a3", "sighting_of_ref": "indicator--a28c40b0-b285-4ed4-bde5-d58983e113e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1aaa55-59bb-480d-a978-35729ecb3f26", "sighting_of_ref": "indicator--c86966bc-464b-400f-8cdf-0d6bc89d004e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb558500-622d-406e-b482-c6cc296d648c", "sighting_of_ref": "indicator--05fa4c95-6676-43fc-a475-9ec22701704c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4beb168-9a6e-4631-b501-76838c134bed", "sighting_of_ref": "indicator--a9cfaf3a-66e3-4dbe-ad17-49bf4d968734", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7ba6a3-48fb-4710-bab9-41dc717fde80", "sighting_of_ref": "indicator--90340b9a-6905-4f41-b17b-e3f42cdd433e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb3ee3d-e65f-4c17-81dd-0347f7c5ef0e", "sighting_of_ref": "indicator--8edd34ef-984a-4f89-97bc-8c850a7d9ae7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e89dd2-eb41-4e0c-993c-72af56f23e15", "sighting_of_ref": "indicator--db0be65a-875e-4889-bee0-592983b862f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d2c33b-ee20-44f7-91d3-0dfa59af089b", "sighting_of_ref": "indicator--c5de364c-e7a3-4621-bde0-9dc45c97f285", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dec3df-4c2c-47f3-a3a7-342257981979", "sighting_of_ref": "indicator--50719ca1-67af-4ddf-8de3-86b688e7332f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39818847-e99b-420b-8359-3597ad277b8e", "sighting_of_ref": "indicator--6f29821a-8d5e-4f5c-85e2-8c58b3de3da8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5051768b-ad1f-4d5b-a682-4af6859fff5a", "sighting_of_ref": "indicator--4011068e-4cdf-4fc3-8eb2-f965b0111ab6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cc8bef-1a04-477f-ab16-715ddc6e4b4e", "sighting_of_ref": "indicator--f7509192-6fc2-4f16-81f4-31eb446f9a51", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f2e2b6-d1af-4d2d-9197-972142398bc1", "sighting_of_ref": "indicator--10e9076e-dd71-4475-b99f-447a269b1037", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a64c5f7-a3a1-4207-bc53-9f83513ade14", "sighting_of_ref": "indicator--79473fe0-e6ee-42c5-8baf-ad12afb40588", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185013dd-aa6c-4729-9527-cf5692417393", "sighting_of_ref": "indicator--be79a607-4dd1-4e1c-a212-ca43bbc1401c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e95f94-ea93-490a-9d5e-41cb5882e34f", "sighting_of_ref": "indicator--54e70574-3cec-424a-9206-6b1fa9df1108", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f307092a-5659-436e-9d0d-20a8c7b58899", "sighting_of_ref": "indicator--db439ae6-8f49-457a-a18a-cfe1e35a0f22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397f2620-594c-47a5-9639-f966e91fc3f2", "sighting_of_ref": "indicator--2697597d-f6a9-4159-8d47-3205a84b83fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b62e77-47dc-4661-bf32-531476d0cc82", "sighting_of_ref": "indicator--a8170b95-7daa-4c5c-9560-b29578b3a3ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac59393-5d70-4866-bed2-6912b8e2fa03", "sighting_of_ref": "indicator--178b63db-3f26-43d4-a0e4-bc80a39cfb9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3325d7ba-9cc4-48e9-b3bc-705719a7b75c", "sighting_of_ref": "indicator--62654e0f-b4ad-4a68-993d-a06452c063f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b550af31-1771-4f65-95f3-727a5068d59b", "sighting_of_ref": "indicator--bbd3222f-464d-416a-9864-2427906eb65e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48aff29-55d8-44b7-9d57-881642788e36", "sighting_of_ref": "indicator--5f9dbed9-6439-4b49-9ca9-0c74d5b8fedf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e03431-f0b9-4b36-b070-747273402b6d", "sighting_of_ref": "indicator--031eea0f-5249-44b1-a6db-10211be235c2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77c1394-0d3c-4f8c-bc1c-b46b302e5a84", "sighting_of_ref": "indicator--7aafcc3b-9c0b-429b-b4b9-a96f2ecbf503", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ee67e7-9a78-4814-ba3c-df9b538eb6db", "sighting_of_ref": "indicator--fbea28af-a75b-4aff-a35b-fdf063d4834f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfbe2fe-8996-4009-ac3b-27dc1419f158", "sighting_of_ref": "indicator--65831372-5c8b-4bb5-9b67-fe0762268ad9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a6784d-7ada-4733-9a92-82307ed6f494", "sighting_of_ref": "indicator--c5bf823e-ea96-4f94-8092-bba726b5180a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ff10d-fb7a-44ea-b960-31136183c50f", "sighting_of_ref": "indicator--7f414f5a-7ce1-480a-85d7-eb94ab2ad766", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1ac052-9725-4d69-a54d-860f583cc1f3", "sighting_of_ref": "indicator--1bfd571a-7c53-4a3e-92a2-4d2b164cbf13", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b6cd25-12b2-4252-aae6-e2341e908760", "sighting_of_ref": "indicator--6ccebf11-db12-4f72-b4f8-7a408cdd6ccd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532c7ba3-c569-4298-8e1d-4ef120ed8978", "sighting_of_ref": "indicator--2b0ccca8-c539-48b3-8b8b-5ddc70b3b33d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1656d5dc-1eaf-4a47-b13f-97da66df0dc5", "sighting_of_ref": "indicator--0434bd3c-0811-4705-b361-a60eee69b16a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976b9327-32c6-4e79-a95c-e490b3ddc947", "sighting_of_ref": "indicator--e1d0f375-55a5-4da8-b625-6746dac96766", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c77516-8f5c-4a5e-8714-6bae13c244fe", "sighting_of_ref": "indicator--1019ae78-b0fc-45af-972e-27698c7979af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af915126-5ac8-43fa-916a-af338e84624b", "sighting_of_ref": "indicator--9d3cec00-c7b4-464f-bcfa-84baf20b6806", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674f6291-688f-410b-aa1f-07d3843bd3fb", "sighting_of_ref": "indicator--7592e436-093b-42ba-a553-43d7a56ed7e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5a3068-e9e3-4471-8559-7817254855a9", "sighting_of_ref": "indicator--b1b24bcf-f8e3-41b2-96fa-3a5331975e2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578802a8-cfae-4af2-a692-30c5f478f374", "sighting_of_ref": "indicator--29eb13f7-7531-41a1-a08a-f933e47cf8ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069daae-27f3-47d6-830e-3cece4052d2e", "sighting_of_ref": "indicator--f1e12e4e-9330-42f1-b451-5d624a921efa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26364bd3-7125-49f0-82d6-a7ababd37833", "sighting_of_ref": "indicator--c1fd173b-a1dc-485f-99fe-43c7207b6f68", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490abbd2-f271-412e-8bb7-48d27b75cba8", "sighting_of_ref": "indicator--35ecb7ad-b148-40f0-b397-52529eb6130d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a63c4d-74a6-4efc-8574-55ddf4afdb0b", "sighting_of_ref": "indicator--ef984dc4-dcb9-45ee-9ce3-669e04ffaf70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5085c5-15c2-41f4-b923-73ea55fd164d", "sighting_of_ref": "indicator--483d24ca-76b5-4ec0-ad63-e9b0b8aef68e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799892d9-1bbf-42e5-9666-bc2726b7fd55", "sighting_of_ref": "indicator--cbbae4d6-8516-4521-b177-308f6c95f33c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dba0c97-3a63-4e8b-9808-a924ba0e091d", "sighting_of_ref": "indicator--7eac1e39-4b3a-4071-85a1-ec93ca35b176", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd24de85-ec02-4459-8af0-cb8e3b8ec5e7", "sighting_of_ref": "indicator--e3055a72-503b-475a-bd26-27bd36661e73", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f697504-651c-4f37-a3c5-ce6e10d412ac", "sighting_of_ref": "indicator--853e439f-b7b1-43ca-8c4c-0284906adceb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf31811-8881-4e11-ba75-2504a21afe72", "sighting_of_ref": "indicator--d7e71138-04fe-46b3-8057-b1cd56bc5120", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fed063-87f8-4298-96b4-44c7dffe0807", "sighting_of_ref": "indicator--a3a15175-d7ea-4e4f-ade2-93c7034cf296", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6359c7e-dc1a-487a-98e2-97d6efa24eea", "sighting_of_ref": "indicator--6a632927-c26d-439c-ab89-6c4f945e8239", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f9406f-d522-4ea4-94f0-e3733e952749", "sighting_of_ref": "indicator--549d0b23-f736-49f9-bedc-92670951349b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffc0ef6-b850-473a-896f-7a6ee3752ee5", "sighting_of_ref": "indicator--b2411aff-3b54-473e-ad66-13493547efef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc169144-4737-4e29-ac32-cace6b66fd52", "sighting_of_ref": "indicator--d16b70ef-6c46-424a-89f7-7680ecc1aa91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1014a2-85ef-4529-b451-72f8ee2c52dd", "sighting_of_ref": "indicator--f77d31b5-29d3-40df-be79-00c7e530f5c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea337cbb-ce9f-4cb0-a655-ef8384613812", "sighting_of_ref": "indicator--58d71549-f584-4858-adb6-af4ef12f96e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1209096-abe8-4ce4-b0a9-02d1efa9f462", "sighting_of_ref": "indicator--72ef75eb-7f33-409f-858c-0b728efa3b42", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1645c629-7eae-4ea5-95b5-4bf13a2acee5", "sighting_of_ref": "indicator--0069cf61-bb0f-4c4b-acbe-961a5fedb5a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cac0438-d8f6-4767-bc29-0a57618fc630", "sighting_of_ref": "indicator--4c501b51-8bbe-42c9-bdba-2097764b529d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34ebee5-e67a-43ea-8a17-c27536ca1223", "sighting_of_ref": "indicator--b9e54113-9b15-4e93-a6e6-92736cdf37b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288d1743-8123-4295-9ca5-849c43fc282e", "sighting_of_ref": "indicator--53a103c0-cbd4-4646-bd2b-eac194a44a8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e45ec7-f3ab-4a28-abea-329c98ee08dc", "sighting_of_ref": "indicator--7d876e16-5dd6-4be6-9985-0f53fb62db96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34982deb-cfa4-4dc9-8cb7-d34a6ee16f55", "sighting_of_ref": "indicator--40000f61-474f-4146-bf21-e19b1af9911a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f930ae0-df7b-407b-b964-9e1c2d5ff5a3", "sighting_of_ref": "indicator--9c57df15-22d6-4db9-9c6d-163ea2de47e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eacfa5-f6cf-4203-9ae3-de9e42c19dea", "sighting_of_ref": "indicator--c59c0886-960b-4c4e-8298-51158dbaa507", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49c3f29-da29-4383-8d0c-422509457e02", "sighting_of_ref": "indicator--6bd8c1a8-713e-4565-9909-ddb2522b4179", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b618bc1-888e-465c-af87-001ae00794e3", "sighting_of_ref": "indicator--27661588-a714-46ec-91b9-10faa9feb6fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a77466-440a-4e6e-a7c8-aac165d5b472", "sighting_of_ref": "indicator--c6314c7a-7dcc-4baa-910b-306a7f37721f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74147b5-4444-4344-98f6-d8509daf7630", "sighting_of_ref": "indicator--fcdba375-d117-4b7a-bc56-29386afdef96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ab7565-9847-474f-b76a-41f976ada257", "sighting_of_ref": "indicator--699f50ef-2f4a-4bce-8972-178d18be1aea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaedc823-164c-4fd4-901c-605c3384f5bd", "sighting_of_ref": "indicator--54577c09-8c1b-4f00-a025-4b44c0291d24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232da07a-b634-4509-9d71-92119dc96df8", "sighting_of_ref": "indicator--97e56857-6551-4a8d-918d-e61a6a5d2cff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cf8522-6046-42e1-820d-5d13ae0c249b", "sighting_of_ref": "indicator--27793218-711d-46d6-a469-6c5f4c954d71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a814f04-74ef-43a0-9e6a-6c3b2804217c", "sighting_of_ref": "indicator--355e9e12-4ed1-41ef-af38-b4c197539f91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f1ae19-dab9-44b0-b607-e486ee19aa87", "sighting_of_ref": "indicator--8f6b4707-fb0c-4535-a7e5-7ddd6eb5d8ec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6285215-eba7-420f-ad13-0f3d30d9b415", "sighting_of_ref": "indicator--de73846c-a63c-4e55-a3b5-c51bad5f07af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c59e89-1b47-4a85-9c8f-e03c8f94e7ab", "sighting_of_ref": "indicator--474a8e46-1a09-42bd-a80d-5f195806f54d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd10d49-bf68-423d-95eb-f2b948eb53fe", "sighting_of_ref": "indicator--d9708222-cbb9-4226-be81-94868cecd52f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e2e4eb-0286-4098-a6d2-842622fd66c5", "sighting_of_ref": "indicator--87a7b117-00f7-4a76-8d4c-863579dec9c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07344855-82b8-4236-b26d-f8ad7d91a329", "sighting_of_ref": "indicator--5a71f652-2321-426e-895b-62844c46fd1f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a910ae5b-4839-47a0-90a2-c1c7a1ae8fc8", "sighting_of_ref": "indicator--a5e322a3-6e5c-400f-a105-a1ba7f429f8e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6414f585-df53-4ff3-a0b4-28e18881c580", "sighting_of_ref": "indicator--13f499c1-2c0c-405f-9a40-5807ebb0c9e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1b320f-e1ca-4a8e-85cd-9ba8120427e9", "sighting_of_ref": "indicator--d43ddc30-6dbe-4c0b-932a-a8429a35087b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee661b4-52cc-44ab-a828-a9f4cffa2721", "sighting_of_ref": "indicator--202184a0-6621-4261-bb78-f70453424e95", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf677ce-de99-4626-91af-e4269b71a569", "sighting_of_ref": "indicator--4065a326-d318-4201-b2db-04bcb2cdf812", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1775a8-9fc6-4cc8-86c6-15c87155f6bb", "sighting_of_ref": "indicator--08387ca3-4bdd-4eef-a381-907d8b3d477e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64f9e85-8380-4668-9fd6-5a76e90ffe7b", "sighting_of_ref": "indicator--572d9ed1-5aa6-4886-b26f-6ad6f0918249", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584fa5c5-b8a4-45c0-9135-68dcc509c27e", "sighting_of_ref": "indicator--2e56f566-dd99-4e85-b2e0-08830f72b619", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd7a65d-9819-4dd6-b711-36ff30224371", "sighting_of_ref": "indicator--a6f0c285-b98e-4ba5-b906-8c2e1e054fb0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1237032-2582-4288-974e-2edf1448ea19", "sighting_of_ref": "indicator--84e51940-f3f8-4f80-9e50-f72cb95ad3e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f296976-6fd9-4b1a-a5da-47711fc4792f", "sighting_of_ref": "indicator--3f50672f-eb0f-40d9-b2f1-dab4d696bc72", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4787d0e2-c484-4fdc-a43f-0396c949b947", "sighting_of_ref": "indicator--bbc2ce7e-5360-490d-a77f-340640a5ee2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a30e49f-ac0f-40e3-beaa-9d89e35ee812", "sighting_of_ref": "indicator--5710d52e-12db-492e-be2a-549a172f2087", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccb7d32-287a-495a-aa3a-c6757ffb972f", "sighting_of_ref": "indicator--2331cba6-fdea-436e-a240-2283c4a6b2c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f84fd1-fb8e-4a2c-9362-f7da2c219c0d", "sighting_of_ref": "indicator--afde6ad2-7d11-40c0-b624-dcfd738303ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a56d6b5-3aae-41d5-b41e-3893a04bc496", "sighting_of_ref": "indicator--eb85cdb2-907d-4395-8427-14680893a7f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8cd1e2-721f-4185-b42f-811ff91d3931", "sighting_of_ref": "indicator--185c9d0c-ada2-4c7f-bfc7-d12dbdcedf34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05706068-151b-40a5-bb80-6074db683bf9", "sighting_of_ref": "indicator--697de8cc-3097-4e2b-891d-576a3fd952c9", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67ad171-828e-4a3e-9ebc-c062ab7d81db", "sighting_of_ref": "indicator--2d0c3b76-7214-44f5-a300-5db073711994", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ad4348-26d3-4414-93f5-b86dbeb8f345", "sighting_of_ref": "indicator--28f1e1f2-781f-44e8-87d5-4d06cbc4f70e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e432c8c5-d3ee-4a8f-a9ff-3e84c46ef93e", "sighting_of_ref": "indicator--2ac6cbd8-c853-447f-9842-6300c62e5bb5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190b62e9-cbeb-45c5-a8ef-ecf64c897329", "sighting_of_ref": "indicator--dd8e2404-aa37-4c83-b9b2-21c46cb94055", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25191ac9-a73d-4e1a-95df-3788e57ef0d5", "sighting_of_ref": "indicator--720942d5-aa31-4df9-9b21-92cae991992d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187c616c-7896-41f4-a473-7eae48b93aea", "sighting_of_ref": "indicator--e1f79915-da2c-47c9-8849-ec736f8ec0b0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d66da03-a79e-4ced-ac61-033355e48dc4", "sighting_of_ref": "indicator--618a6937-da20-4f09-b448-a574f0f32642", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7751cfb-3247-48a7-944e-26e518782124", "sighting_of_ref": "indicator--d049e15a-6696-4eb6-90f6-c1aa7997a826", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7aab3b-cfba-4d51-8da6-73ad298dd361", "sighting_of_ref": "indicator--eea63322-3a67-4113-8534-aa2360f24d7b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f08377-106b-4ff6-80fb-06b0043aee22", "sighting_of_ref": "indicator--7aae7615-90e1-46b6-a39b-77a9409bacd7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aed25e1-810c-4bfa-9d92-9477fa290ae4", "sighting_of_ref": "indicator--e1510162-ad39-4439-9cdf-02bb6b3ba812", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fb3593-4d45-40e0-89c4-a9a6dc5c377c", "sighting_of_ref": "indicator--24f410de-e684-4baa-803e-c42359459290", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf58989-3d8c-4cf9-8a18-76d4ce4e3cea", "sighting_of_ref": "indicator--13fd3821-1dbf-428b-932a-cbc22acd8b35", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e002dd21-c7e5-4508-8512-439fd872248b", "sighting_of_ref": "indicator--8710364d-b62a-4a19-b54c-44e8d6009bae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e121c0-b466-4a5b-8211-d88d4aa72328", "sighting_of_ref": "indicator--115cf4ca-db30-4aa8-b1e6-0201f0e0b7d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d36c8c-d6d3-4515-8ef3-6637746fac21", "sighting_of_ref": "indicator--6ac6c540-428c-482b-a102-590df39a6295", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048fe3a3-ecd8-40ef-86da-efc91f347dcd", "sighting_of_ref": "indicator--c52eec69-b743-4c37-bce6-a29cd88aac17", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f7c369-2916-4dca-a8c6-0d8baae6806c", "sighting_of_ref": "indicator--a0aa296a-0b10-4f1b-8560-7279199ed4cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ec3144-01d9-4110-b5fb-994249f9be4f", "sighting_of_ref": "indicator--0ee6de26-4188-41a8-a98e-40f0f626ae2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3348e8be-9791-49fa-aa75-3a283d40bc96", "sighting_of_ref": "indicator--764653f3-e81b-4982-9b04-cb32ed56d198", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf12bf-6842-4885-a175-21e773b928e4", "sighting_of_ref": "indicator--acd42c96-0ff3-4814-9fcc-239150701cd1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566fa960-1ed9-40f9-8f32-d149d47319ec", "sighting_of_ref": "indicator--76475bc1-412b-4bed-a882-b2299792345a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9008f1e-99a5-4006-ae7a-c095f150ae72", "sighting_of_ref": "indicator--9b3ff2b7-9fd0-4a5b-aea4-4f3cda27df68", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0ea144-8e68-490d-be7a-61640ecd4d59", "sighting_of_ref": "indicator--f5e2fe29-241c-4052-b070-acc48a0a281d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30219d19-58fc-4f31-bf37-80a52f89f1ba", "sighting_of_ref": "indicator--da068bf7-6c70-496b-82c3-08f8fac713f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698b3ff0-e069-4754-8e4b-503590eab521", "sighting_of_ref": "indicator--8187fe62-c05d-4e68-bfe4-1866afe03c88", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34bb7da-121f-4102-8c32-a964ed3ecae4", "sighting_of_ref": "indicator--c90cfaa0-8b74-43da-952d-787f4efcc577", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a5c3a0-40c4-4853-a979-6cfb7544bcac", "sighting_of_ref": "indicator--1c684d1a-8890-496c-9e21-1755d3b55670", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3659acf5-c9e4-4945-9602-c2e24fd7142a", "sighting_of_ref": "indicator--aa8a4549-092e-4e84-a370-449d357655e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0403f0dd-4599-4d03-8feb-85c390bcf507", "sighting_of_ref": "indicator--52144d9c-41d3-4e10-a576-a70e13183ec6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29e108e-969c-4c0b-8f5f-18c5080bc08e", "sighting_of_ref": "indicator--587b91be-ab98-4f11-a72f-481db7c28a70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2ebb1f-e878-4353-96a8-9d4e853b1b5c", "sighting_of_ref": "indicator--92eb9ffb-5432-40a1-a3d4-f2c8e1a60738", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ec581f-944a-4328-a9f9-d8e5705f7c09", "sighting_of_ref": "indicator--8d617e49-444b-4b86-9beb-023f1b17ef33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df64c21-450a-4bbc-bb00-8903ca673d01", "sighting_of_ref": "indicator--b2ad6acf-b9dd-4e86-b6f0-19b74abd92fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dc04f2-da8a-4765-a499-76d1470efe86", "sighting_of_ref": "indicator--e0944acb-61db-4df9-bc7f-3f33c63625d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43787e7-2ae5-438c-bd8c-c92dfb93bdbd", "sighting_of_ref": "indicator--76a68091-319b-47a9-afb0-2fb277065e70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4ea49a-ef5d-4d0a-a9b2-1fa54e1a056d", "sighting_of_ref": "indicator--d548b011-f79d-4b75-b94d-bedee52e5a9c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaf04a1-4e21-46a9-861c-7ac00b74b7af", "sighting_of_ref": "indicator--70bf285f-336c-4687-bede-a21dd07d2258", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4490194-7b4b-496e-8264-ff8cae44b599", "sighting_of_ref": "indicator--5927a01a-3b96-4fbc-858d-f9ea330a6df8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b3519d-72c9-499c-92d7-56e48914f04d", "sighting_of_ref": "indicator--fa01112e-4fa9-492a-8e3b-918c44d7dd3c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8ced5c-c4bf-4705-93e4-3733e13b7e0c", "sighting_of_ref": "indicator--5957ece1-1e66-4597-bf57-e8eaf3867b0b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeaf7cf-b22f-4259-a20b-76ceee96ab01", "sighting_of_ref": "indicator--5e331286-63a7-4d7a-94f5-5c255c4f4a65", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3071d39f-a1f4-43a3-a975-f326dd5d52c9", "sighting_of_ref": "indicator--e4a77133-b0bb-4658-b291-a90f9e2a5dfa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef33a5cd-257a-4b29-a3ee-82c1d88c1aa8", "sighting_of_ref": "indicator--50818836-02b5-4b1b-969a-39488c1058bf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caabc728-2b4c-4a3e-a635-7be2af2cad5b", "sighting_of_ref": "indicator--a96bbeeb-405a-47d0-9f14-e772d1b04374", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d50c843-c3e1-4606-be42-9d17187d5041", "sighting_of_ref": "indicator--a3352132-d153-48d8-96d3-a74e083952e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff535aae-ed86-4022-9ccd-82002d990963", "sighting_of_ref": "indicator--6b067b25-407d-4fa2-9562-668d7e017832", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25badf69-aca8-4e4e-b5bc-3653980ad3b3", "sighting_of_ref": "indicator--02fcaead-8c88-444c-96e3-dee2ad6bdc72", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9881d11e-183d-4af2-8a4f-8f295e108692", "sighting_of_ref": "indicator--f5a6cacd-f20a-4e04-957e-56ffce20c926", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a993b19-12a8-4b51-8102-4224e0e32689", "sighting_of_ref": "indicator--2bd8f2e6-d5c4-4abc-92ca-a08bcee91689", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e23801f-56a3-4903-a293-946d11aec71e", "sighting_of_ref": "indicator--356f67b5-75e3-4347-849c-e083f8d46d82", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8e66b3-a362-4f8c-a314-7026aaed97c0", "sighting_of_ref": "indicator--de29527a-74e3-488b-9fe7-9fff211cd838", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45408b1-fb36-4407-a851-c58f441d0d41", "sighting_of_ref": "indicator--3cf84c83-d39b-4c4e-afc1-f654753f0643", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a9c15b-4c68-41ea-8304-46d19566357f", "sighting_of_ref": "indicator--0eeb7b91-4c25-478f-91bc-9c1bb23d7123", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f7aefa-f5f8-44af-905d-379afa08fab1", "sighting_of_ref": "indicator--eed092fd-1b43-4475-98ca-c6e0361d484f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39b53fa-3f52-4795-a86a-11f1cbe18aed", "sighting_of_ref": "indicator--225fca20-e0ee-4bf3-8432-04a5e7920327", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae636bf-85e2-443f-9f29-033e4da46a9d", "sighting_of_ref": "indicator--5ee42e5f-a742-467a-89b9-c57756ca23b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a0cbfe-1097-4b03-a24c-618d682825fc", "sighting_of_ref": "indicator--23531ffa-603f-4b96-be1e-fd0bf508e0f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7963ab-9892-4b72-9e9e-928fb083a5ba", "sighting_of_ref": "indicator--524a1b5d-b6b9-4d00-9b1e-de228bb2915c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acf91c7-2f0e-409b-b315-01979523d9f4", "sighting_of_ref": "indicator--026989e1-d06b-4290-9f7b-3e6495694985", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470d55d4-b570-4b49-97fd-872dfdd53436", "sighting_of_ref": "indicator--e43a7b91-66ab-47ea-8212-a571e8d2fcf9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f883a7-9697-4c1c-bff0-39dbbea397cf", "sighting_of_ref": "indicator--94967ef6-f53c-4f9c-928f-c13a95e8ab71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c287580d-16f4-4063-a066-554cc537c4fb", "sighting_of_ref": "indicator--c208ac41-fd19-42db-af39-1a0a529f08d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4301f653-1682-4be2-970b-ed9876d320e4", "sighting_of_ref": "indicator--fba6ba83-df65-4557-8132-5e5dbf9ba21b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e460829b-ad9d-4c10-b551-4e9f6ea57cd7", "sighting_of_ref": "indicator--ac2fd9bf-cc29-452a-bf92-c0d1a8e9336c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7ff71e-8ff7-4934-973f-fa50a3c1725d", "sighting_of_ref": "indicator--7e6063b2-02f6-478d-a5e2-ff7df4c4598f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c30bdb9-48aa-4255-965c-1bd409edb2aa", "sighting_of_ref": "indicator--41b772e9-a76c-4b7b-9571-ccfe6c74a8ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2767ef3c-87b3-4fa8-bab5-8b5406b807dc", "sighting_of_ref": "indicator--a19cd590-6585-463a-b5f6-49ba15d33aad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ab90b3-4e2b-4bd4-a2bd-0e72e8ed1e7d", "sighting_of_ref": "indicator--9232009f-95a4-4955-8346-4c89d8775c10", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1e17c1-9bf0-454f-917f-1e765d850d04", "sighting_of_ref": "indicator--c54e59e2-d884-4f62-98cb-a41a358f3d8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdb4f56-fa1e-4d32-920a-a283285f2ec5", "sighting_of_ref": "indicator--4cfbf561-8ea3-46bf-a122-bd29930860a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb45df-5bbe-436e-adca-faaea7235df6", "sighting_of_ref": "indicator--7450ef2e-10f3-474e-9c21-6f1d78b441ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b3d58a-0889-4920-aef1-1ee845cc9b15", "sighting_of_ref": "indicator--5b7ec467-3f60-4212-a6c8-c4da4491f475", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294b2b35-20bc-4cd2-b835-3dc3594fa6eb", "sighting_of_ref": "indicator--9451502a-ba98-4e69-bdc3-91cf8abeb86c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0b3279-7502-40b4-9f30-57ad6e8b0d34", "sighting_of_ref": "indicator--bb7b3026-819e-4d4e-a8f0-710e1c9eb38b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c56b6-f901-431c-813e-ad4bfa2cce61", "sighting_of_ref": "indicator--096b35a0-37bb-478a-928d-7e2d57eb569b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fcc8a0-b02b-46c5-8c23-1502f8100e95", "sighting_of_ref": "indicator--460c77ef-b574-454f-9433-9c9085300022", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9c5b17-ad4b-47a8-b7c5-fc8005760357", "sighting_of_ref": "indicator--d77e3799-ce35-41bc-89a8-030024a9cd30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8145e87-7d63-4d46-ad25-37c5db5845b1", "sighting_of_ref": "indicator--314aa3e6-2b3d-4ca5-b6bd-c434129e5a9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631492cb-42e1-4b48-96b0-ad32ec7bc7cf", "sighting_of_ref": "indicator--125446d3-e77b-4ffc-ba24-f2e3cae03ffd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed0b715-7603-46fd-a9b9-2eafa3877f7e", "sighting_of_ref": "indicator--40330d77-c765-4114-9b88-d8b3b39f0e50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3aab60d-a75f-4c16-9fa0-0845ef0b1fa4", "sighting_of_ref": "indicator--605c6d26-8221-4774-a059-c9883e7022b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c8ba85-6607-47bd-834a-9ab418657c59", "sighting_of_ref": "indicator--ee36e30b-5d87-474d-88fd-420f69911e95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2516c791-0a3b-4c07-bae7-5167336bd6f3", "sighting_of_ref": "indicator--7938d9da-8810-4b85-aab8-dc3221f0945e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a4ca2f-e118-4259-bf28-2dfb40ed9931", "sighting_of_ref": "indicator--3b4d4a77-f6ce-4b1b-88f5-fe9b9886480d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4468e0ee-a74d-4375-ae8b-865de2bfa4f6", "sighting_of_ref": "indicator--b68ebf1c-eb61-46c0-9377-5480e029ced0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b0f8e9-59d6-4362-815d-105746e5a4a0", "sighting_of_ref": "indicator--39d077b4-fdf5-42e3-9336-cec500b662e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf8cc1a-e26d-4279-ae0a-acf12ec73c1f", "sighting_of_ref": "indicator--35c1c26b-598e-4781-8e75-fe3db7f7f6b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c020daf-6bc1-4fa7-9bad-80589a3ce043", "sighting_of_ref": "indicator--a1c363c6-8242-4996-891c-7e26a0bed0af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e93b3b4-bda8-4f60-ad52-4fbf147d0e14", "sighting_of_ref": "indicator--9ebb503f-6df9-41fe-936b-5d7e91287c91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c52b15-9c38-4546-984d-5d70ee3667d2", "sighting_of_ref": "indicator--ec4da20a-98c5-4eb7-a41e-7e66d7feea43", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c84051d-1630-4c92-80df-ba80d3443df1", "sighting_of_ref": "indicator--b810490c-5ba7-4206-a0d1-445059095966", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ca9dd2-0c2d-484f-ba21-15e418dc0928", "sighting_of_ref": "indicator--7c822930-3fce-4927-9669-af31a2b78774", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25466a16-d12f-46b4-9a84-010574c57e13", "sighting_of_ref": "indicator--ac7dba2d-90e8-4eac-b49c-a6daf242a2c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4db5d12-3a47-4a27-ac4a-1db0bfd3ff74", "sighting_of_ref": "indicator--287b66a0-779b-4930-9166-ccf9477b6243", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da0e071-5ca9-4be4-bd3e-3c9cfcd8cca5", "sighting_of_ref": "indicator--b003972c-c2fa-4f0d-9501-98999e2b56be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575e7c44-2bcd-48af-8f90-2ec210aa844a", "sighting_of_ref": "indicator--4cfc50b8-1ca8-4cca-ab12-2d04dd04ce18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2234978e-e87c-438f-98b6-dd10653b5203", "sighting_of_ref": "indicator--fa37444c-2ef3-4e23-9f0e-518b494635a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f496a6a-8325-4a2d-9442-ed15065d91b5", "sighting_of_ref": "indicator--1e736bd2-4201-4d2b-ad92-ab37b451e26b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d627f54-c31e-43d6-a52f-f541bd794558", "sighting_of_ref": "indicator--8d30f11c-221a-429c-a836-8d5dc729f81a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af44521-4f08-4f22-94dd-be3b1310d13a", "sighting_of_ref": "indicator--ea25b485-696c-4be7-a42c-fc32ae556660", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78427718-4aaf-4395-980c-f5c46444f6eb", "sighting_of_ref": "indicator--cfa8e51c-9288-4cb4-a92e-e9e4791eb05b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feddc762-588e-460d-a955-ffdf16643e82", "sighting_of_ref": "indicator--4af59a5d-36ae-4d96-acd3-7f67ae2d506d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0037e2-90fe-4e8e-aea1-ae7ca56bf8b4", "sighting_of_ref": "indicator--5af703bf-c383-41e0-8459-4c53a56514c1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b93c91-92c4-4302-95f4-840040a634fd", "sighting_of_ref": "indicator--06e48274-b4d2-40d2-8644-0de0d533d669", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4717c9d9-6474-458f-994b-9f2d4ce8731a", "sighting_of_ref": "indicator--da1ba0ae-4f7d-4db9-9ff9-cc008d21b586", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7989a4-f882-42ce-8617-77cb9de90165", "sighting_of_ref": "indicator--9ae5c706-63aa-47c8-bc85-8964ce39c031", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf87f3d8-9827-4adb-b883-19ebdc0b85c5", "sighting_of_ref": "indicator--c54f21d0-a9cf-40b5-ba3a-1642031a01dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9039b1f-0bd9-458a-98bb-67120c012dda", "sighting_of_ref": "indicator--db0cea13-9ef4-4094-8c80-7d45e8ad34cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0308a17d-809a-4a41-87c8-30d9c386abce", "sighting_of_ref": "indicator--202362fe-30be-4c29-990b-df4140a0bd0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b50c64-e9ad-4269-82d6-fe1b91b0e554", "sighting_of_ref": "indicator--d6d43e5c-a305-4a2f-8eae-991de7f20a2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0e14c0-e083-4e12-b55e-5300f7d1b730", "sighting_of_ref": "indicator--bd98875a-04ec-4c03-ade2-bdc003ee72aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea694b23-0d21-47c4-8963-31abf89fbc28", "sighting_of_ref": "indicator--d9dc3e34-dd66-4577-8779-292498af411b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a003f48d-de56-4132-b264-4693cfdb6f81", "sighting_of_ref": "indicator--2187e418-fb1b-40fc-b7ad-4264cf18e990", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1378d172-2414-4311-94c3-b39608427d27", "sighting_of_ref": "indicator--2d2288a4-dd45-4bac-a095-1e09a890991c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af1a3a2-2e5d-4e76-a7e0-85fd485413ed", "sighting_of_ref": "indicator--2d2288a4-dd45-4bac-a095-1e09a890991c", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b5f36b-0673-4be7-aecd-80832bab4b35", "sighting_of_ref": "indicator--f9103556-a64c-454c-984d-327a23494a13", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88bc15b-b8d7-43fb-8a68-d14f9258507a", "sighting_of_ref": "indicator--70704579-5334-4c60-8cb1-5ebf5d585e58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e3016e-1dfc-4c2e-9f10-d1f562a60784", "sighting_of_ref": "indicator--46633968-96e9-4228-beb2-73768d7b4b30", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c6f308-0ae6-4041-a02b-7e124a3b26ac", "sighting_of_ref": "indicator--36ea9527-1b87-46ba-ab25-e807d4ce38af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1e2e87-410e-41ee-886e-e8a603ecb365", "sighting_of_ref": "indicator--c84eab5c-501f-4bfc-a217-6378c81f5426", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bed7ac-ae86-4c17-bd08-3a929c1bba45", "sighting_of_ref": "indicator--1c7b9a6b-5350-483f-996e-31d0fa6489e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707a5269-b551-44a1-8e0d-00140c4ac3eb", "sighting_of_ref": "indicator--ebea273c-624b-43ee-86ba-8daf92414753", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a182c5-fa9c-417c-8d48-006f41d32ed0", "sighting_of_ref": "indicator--7a771d16-0e5f-436c-b61a-41a0434dfb0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267a72ab-daa1-4a8b-ba34-940cb94014ba", "sighting_of_ref": "indicator--f5cbbe63-ff33-47a7-96ae-24ed4e8aeded", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e6711c-4fd0-478a-978c-fbe59fc894a5", "sighting_of_ref": "indicator--bd2fceec-398c-4a3e-b521-e691b4f807ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2605c4c7-a7e4-4466-8e53-85d9b37d0c4b", "sighting_of_ref": "indicator--94a3a121-cf10-4634-a733-85b26d5326d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cbb3f3-071c-40a0-a413-04f68ac3a80f", "sighting_of_ref": "indicator--dcc11058-845f-40ab-8892-f2d599c5e17e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f418255d-19ae-4b20-ba4b-684e57f8cad8", "sighting_of_ref": "indicator--e77e0198-017b-44d3-925c-5d9a8429c2a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0667c7c1-834c-4d97-8f38-b3d4a99590bc", "sighting_of_ref": "indicator--aafdb95e-39d3-4cfe-aa6a-8e25f590dff8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b6c206-5a9e-4a74-bc35-d5446a9cee38", "sighting_of_ref": "indicator--cbf96502-ec85-464f-b654-106dcdbc1a19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77ec119-f70e-45a3-878d-e546a25a0891", "sighting_of_ref": "indicator--d5fca744-f269-462e-9017-4dad6c8e67d9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9d7af9-92a5-44fb-a870-e1f03bb31aa4", "sighting_of_ref": "indicator--7b0fceed-3f3b-465f-ad32-c034b6943bee", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aaf2d1-a972-47e1-94c8-e6e54322d394", "sighting_of_ref": "indicator--cf4644a9-d3a8-4905-b3e0-3a0502c82427", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13573ff2-0384-47c0-a32d-3994cd232166", "sighting_of_ref": "indicator--338af1cd-59ba-485b-bd42-b38999452101", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37aab6f3-af1f-4454-9795-79abf477cd82", "sighting_of_ref": "indicator--338af1cd-59ba-485b-bd42-b38999452101", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73fd748-5b3b-47b9-9c2e-fa18ded69a35", "sighting_of_ref": "indicator--f6b83822-340e-473b-bf17-e3bb3567731e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275482fb-79d6-45ed-ad07-d6a9d7938e18", "sighting_of_ref": "indicator--8aa085f6-0b51-4cfa-89a8-25bebf2752f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dd3d35-4cf5-4fe3-8744-083240cd3f26", "sighting_of_ref": "indicator--7525156e-4310-4d4e-a91a-b30d80772354", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e1ea8e-a764-45c6-88dc-1b8270ec4bcf", "sighting_of_ref": "indicator--d1eae9c6-0483-4d21-b176-7f62beaddff1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aea8bb4-f7eb-4ba2-80b4-906875f2780d", "sighting_of_ref": "indicator--57823ec3-2d06-467b-835f-982e7762d529", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1096c0eb-8941-492c-a461-26b9c8259fba", "sighting_of_ref": "indicator--3cfd823e-4a88-4d72-b196-d9225c8580a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233ee1c6-100a-4895-b8df-b6baa9a60d50", "sighting_of_ref": "indicator--2e68a606-25cd-4eda-b754-2fc6fc5de9a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de32425-7cab-4778-8b48-1808fa8bd64b", "sighting_of_ref": "indicator--0588aba9-827a-49d6-b595-fbae1f6f428e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9171cb50-e2ee-431a-9125-3054ee39bf1a", "sighting_of_ref": "indicator--e0311e18-4443-4548-ae09-d87245391e0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea154d6-f07d-4947-a9a8-fc3d04bdba3d", "sighting_of_ref": "indicator--bd58ec6a-e2f2-4ba9-a784-ea283c16f5d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b06b65-83f3-40b1-8c21-816beef1e625", "sighting_of_ref": "indicator--538caf70-83f2-403c-a4a9-fba0e1d947d1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9750cfa1-7c51-443c-bd2d-76528a71d00d", "sighting_of_ref": "indicator--8fcef003-34ac-4698-9fbd-13cd0b2f118d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e88da0f-0103-4feb-b2fd-0946ab309588", "sighting_of_ref": "indicator--20ba7a50-7bee-4f08-8052-049278c7cf04", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a421d15-59b1-4a77-8ca6-94d57ee99d5b", "sighting_of_ref": "indicator--e139546d-3b4a-4d8f-a4eb-f32800995a5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092d8d1d-1998-44b7-b9ac-2b6ffba694ef", "sighting_of_ref": "indicator--3240b074-c411-4918-b66b-00a66278bf37", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c1f263-0a69-4340-8c8a-02aa885b6551", "sighting_of_ref": "indicator--967ea104-2a52-42dc-82eb-bbc91ccf1b0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2439ea0b-a583-48c9-9f0c-28646665e163", "sighting_of_ref": "indicator--aba3f23c-669c-4b54-a798-2df8755fc936", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18e9434-ee7e-4ad2-8d2e-87e3de360901", "sighting_of_ref": "indicator--38038f54-b17e-442b-9146-66a6efb78e6a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc5db6b-f4fa-401d-b3c8-8a35f0054bf5", "sighting_of_ref": "indicator--34b6a790-0a8a-4273-ba33-f6c82a481325", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd48ee5-3add-40f3-b84c-550c7acf190f", "sighting_of_ref": "indicator--23a2a483-b4b1-4474-97ad-897c53a52439", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd510a6-475c-4118-8c77-f0d7ed0cbd87", "sighting_of_ref": "indicator--751cf389-0c13-4c99-b1dd-66ab120ab04e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66316519-932c-4bc1-900e-bc05add8848f", "sighting_of_ref": "indicator--dbe343ae-985e-43a7-b496-3208b25a71c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c179103-f1af-4e3a-b3ad-4a3888a3bbf8", "sighting_of_ref": "indicator--03fa92c8-ff79-4410-b497-c0b19c39613b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fb0b70-1e1a-4030-b942-8d94619cab3e", "sighting_of_ref": "indicator--dc26865f-f102-4bcd-8f9a-51e9f20777e9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb1d391-c3e0-4cfd-badc-61aa40bc2800", "sighting_of_ref": "indicator--8b73820c-69b7-4b13-96c4-fd4cd3c8b1f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88e8ff5-7011-40cf-826f-7187aee7816e", "sighting_of_ref": "indicator--a85f08c6-92ed-4036-b96a-4bc7764680d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4e393c-287e-45b6-b602-6be22aea7abf", "sighting_of_ref": "indicator--7cb46550-d77e-4175-8a92-b41718df19fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9250ece7-ce8f-41ba-8da4-b8114934dfc9", "sighting_of_ref": "indicator--57fe9898-eb7d-4313-8d94-42343ac06f39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4868efcc-1607-407e-8857-5939a19bf4b2", "sighting_of_ref": "indicator--5b9b2611-0d96-4281-86ef-b0d6267f44fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5391b582-0679-4728-903c-b75db1f9ace6", "sighting_of_ref": "indicator--c42c2165-64c7-4037-a0ac-c6ca5a18a187", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c887d6bf-50a5-410e-8e6f-7763e5290c76", "sighting_of_ref": "indicator--fd6e0cf4-4595-4d4c-99c9-e33b3bfd7e17", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dbf228-0b0f-49f0-a4ab-2622b4fb42b1", "sighting_of_ref": "indicator--830e116d-9c8c-465e-814f-d8895973fff1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1368e247-d7cd-4f9f-a143-d17430e30fc7", "sighting_of_ref": "indicator--61062fc4-b45e-4c6d-97b9-7a56c564dd47", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd657393-819b-4263-b751-6c1da9bf1479", "sighting_of_ref": "indicator--dc5b7aee-d2e5-4d18-8a1c-6107f6407f60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0f0b07-da93-4358-923b-00e4927f169d", "sighting_of_ref": "indicator--2069d505-2b03-40a1-bd65-40968c710c0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ffdda4-c1c4-46fa-bd0c-9945f56e5f04", "sighting_of_ref": "indicator--59c31874-320f-427d-9037-a6fa55732919", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8740819-2512-41ff-b2fb-219ed3d23a19", "sighting_of_ref": "indicator--79017702-c89b-472f-a0ca-121b4cd31d93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb46163-096c-451d-abf6-7f2f4d5f114d", "sighting_of_ref": "indicator--867d2812-094e-4c7b-a0d6-136a5a81bc4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e0630d-4d9f-414a-b69b-bf64d436fa0a", "sighting_of_ref": "indicator--6fdbf14c-efc0-468f-9a98-c12e03fa7adc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb27f8b7-c9bd-4e21-aba0-d34eb11c9b43", "sighting_of_ref": "indicator--88d77c04-c1c7-410a-a3f3-71c310c6aad2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e97781-8f6a-4f1c-8a3f-84483e2725e8", "sighting_of_ref": "indicator--217972e4-dfcd-46ce-9bd9-d12d0266cd01", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4a7f88-7e31-42f8-b1bb-690a026e4d57", "sighting_of_ref": "indicator--f7a43bc4-ceb0-450a-96e3-730eab2f49b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d125e2-ba8d-4efb-9ab4-47db058af589", "sighting_of_ref": "indicator--eb6ea5ee-01e6-43f4-9ca2-b6a3e836dc2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcc7119-2aad-4755-bf0f-dc8ab470a25e", "sighting_of_ref": "indicator--b865652e-c83c-4fd5-b93c-6b29d1552c20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fc1c51-e01a-45ec-abd1-4fbb5f0bc633", "sighting_of_ref": "indicator--64eb77c6-b0f8-4813-b8eb-3a2138208743", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5791bd9-1b55-461f-9ada-01ef45bc1f79", "sighting_of_ref": "indicator--8996f75b-8e35-4a94-9d5d-ba378a679227", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf66d06-7bd1-4829-a1fb-4105a01d4472", "sighting_of_ref": "indicator--1af64684-a4fb-45fe-b455-8596d1cdab9b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacbda27-3616-40f9-9bca-7c4ad55f2df8", "sighting_of_ref": "indicator--1bdcd670-d84e-4f22-b442-f06d6ad06f35", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3791f6ec-2f5c-4cb3-9ee8-83fc0ffd0a0e", "sighting_of_ref": "indicator--c6301dd4-3b32-454d-813e-54b964f3f0f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d2544c-25d2-4ce7-ab77-8cb1e92c1b7c", "sighting_of_ref": "indicator--4f02d8fa-49b5-4df2-ba7c-532e79f9ff5e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea02bc5b-2737-48b3-b6e7-ea89acefb833", "sighting_of_ref": "indicator--c14b359f-cae9-4a3a-8655-73d188b38a51", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94fa148-1b4b-4da7-85b4-0058a27cf53a", "sighting_of_ref": "indicator--39eb194f-7491-4144-8eab-d5f7d1d7474c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460df82a-3a8b-4ee3-9f70-8dc3649df027", "sighting_of_ref": "indicator--1abbb5bd-e16d-4087-80a2-efea97d9ca75", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3eb14a-2261-4bdf-8ff0-a9c35b7f1076", "sighting_of_ref": "indicator--db3552fe-7e24-4f00-acd7-5e5ea6158890", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf0dfff-2fe6-4180-9e6e-106713ee32bc", "sighting_of_ref": "indicator--51bf56ac-b6b1-4f89-8ce3-aaec6f06c3e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1093a265-ba46-43a3-a061-85bcb99bc79d", "sighting_of_ref": "indicator--f2c1fa48-5a31-470d-b3e4-7299312fbfbe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201b7424-8e6d-461a-841d-8528b7484bd7", "sighting_of_ref": "indicator--c9a2fbcd-ef1a-4529-bc72-692e92fb3f75", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5103ac-2909-4c20-a976-1ff295d2698f", "sighting_of_ref": "indicator--a2a71634-b00b-4cfc-ab1f-bef584fd1cf8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129f4c41-03f8-4f24-8f7a-21e0f3f86f7b", "sighting_of_ref": "indicator--4c3469ac-eb33-46ff-91ab-dfd9f5bb4769", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd330fa3-a050-48ca-a3b2-5ac581545b01", "sighting_of_ref": "indicator--19c28c03-403c-445d-b5bf-36430635471e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff6407a-d2c2-418c-bfd9-9789b1212e61", "sighting_of_ref": "indicator--4f6645a3-934c-412a-b9cf-452c3c04c6ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dea00b9-9a35-4f51-98b8-49e39c5a6277", "sighting_of_ref": "indicator--c481fcec-08c0-4d9d-adc1-c0517e2c06c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bec134e-d0bc-4c0a-b616-7bf23bf88634", "sighting_of_ref": "indicator--98e196df-bf88-4b49-9b06-02ce4a444eb5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17340879-aa0b-4bbe-a119-f25dfe8fcb70", "sighting_of_ref": "indicator--73849a04-538b-45f9-a3e3-a3cb6543eb8a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34369137-f92f-497a-a9cc-f56aea1bb14c", "sighting_of_ref": "indicator--600162e4-aa5c-4654-897f-729b23c5e0b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bf44ec-945b-4dce-a819-ea48adb67552", "sighting_of_ref": "indicator--53b03496-317e-467d-a920-d02f178d88cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8986eba2-45eb-459f-958c-10f459e07677", "sighting_of_ref": "indicator--02082192-8f6c-4852-8001-e149f9422a25", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b8fe51-a1f7-4e2f-acd0-2d8c38f89d23", "sighting_of_ref": "indicator--cb5f516a-9ef5-4693-9d78-015edf6da676", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421c6a58-2e02-450f-9c90-fcbe18597634", "sighting_of_ref": "indicator--bcf99226-232b-4a2b-ab1f-3f68cd9f31ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4925b990-ac6f-4eb4-879a-4c7292399568", "sighting_of_ref": "indicator--79e8361a-086a-451c-a5ca-957df60f284e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05a58dc-f4e2-4e50-a7ec-fcc346376380", "sighting_of_ref": "indicator--2c93ee32-cd16-4342-a07f-70146d41dd12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0442d7c5-d566-4c67-8c1f-3a0e3b6cdbd0", "sighting_of_ref": "indicator--16f7f8b1-e941-4b12-b678-255a4126afa2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219569fb-c475-43ce-a7b9-be53c3a9348c", "sighting_of_ref": "indicator--049c6109-1216-458e-8576-b2a82d00bee4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8981d679-d61d-4c34-8b0f-bb904ac17f60", "sighting_of_ref": "indicator--3522062d-9e60-4ed2-80ff-af5dc1c7fdf2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e71165-4f72-4f33-87ca-83b5a67a7c7a", "sighting_of_ref": "indicator--f1715a18-2c9d-4051-a056-5df8e9396115", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4eb07d-d472-4716-9ce7-b7d633d87fb9", "sighting_of_ref": "indicator--8d8ac69d-8308-461b-8853-52176469efa9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec28b87-301c-4865-80e4-21f80b488ae3", "sighting_of_ref": "indicator--675d2246-0d5c-45e4-b1df-98139b61653b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf10593f-9599-4851-824c-bfb0a2363234", "sighting_of_ref": "indicator--fbdc6270-99e7-42d9-9262-cc2984605168", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11509e96-c022-4ad1-9306-3a6c8101f4f2", "sighting_of_ref": "indicator--1b30abeb-c06a-4680-8276-2cd9a08c368f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441ef597-0131-42b8-af0e-8b5f669ea241", "sighting_of_ref": "indicator--65b1049c-a44d-4fcb-8b2a-f16716e9d7dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6957faf2-8a14-4a1c-a435-1a0b5cc93eff", "sighting_of_ref": "indicator--65b1049c-a44d-4fcb-8b2a-f16716e9d7dd", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e93a312-d79a-4dcc-aba9-e78051295d9f", "sighting_of_ref": "indicator--a53d9340-8fc4-4ce0-beb2-62c7321c281d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29111a7-ad7c-4963-96a9-19420d3dd171", "sighting_of_ref": "indicator--f6e57fcd-665f-44ba-9ad1-05e3e3d75df5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4464e0d5-c891-429d-a7cc-b0f6bbe84b51", "sighting_of_ref": "indicator--7164fc09-2439-49b5-912e-3e1077a227b9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6924d1-3ab3-451d-a05a-d3db0e37eeea", "sighting_of_ref": "indicator--2c30cb0a-78ab-4aeb-a2ac-1ea8e5877d46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8717e992-4ea7-4908-b209-3bbf4f072183", "sighting_of_ref": "indicator--3ccee202-aa34-4ba0-b553-0d4b70a867dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a83fa1-5d69-4ee1-883b-8b0e4d14ca0b", "sighting_of_ref": "indicator--3c25036c-4e1c-474a-8e68-f617f02df1a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed6f42a-957b-4729-ab3f-c6e0d8fbca99", "sighting_of_ref": "indicator--671b989c-f952-4ccd-886e-67ee2e38aa08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fc648c-fd12-4904-8804-72c0e51518f6", "sighting_of_ref": "indicator--af79db72-f0fc-43fc-a11a-a33806dc677a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e89427-5c89-45e1-97bd-32e0a0fd8198", "sighting_of_ref": "indicator--4ad6cd3e-ae4c-4895-99cf-a8774186e9e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c80985a-1dbf-4d49-9765-f8af6d4c67a8", "sighting_of_ref": "indicator--f4d795a7-7a54-47fd-8ecf-c318befdc157", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d927e73-7bdb-4687-bec1-164e1e7f2e55", "sighting_of_ref": "indicator--986462de-0c7d-4ffc-9356-a4f005c36221", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b6acb8-6f5f-4e62-ba26-59f73ff0b087", "sighting_of_ref": "indicator--3d9ecc85-2318-46be-830d-b39c623aaa00", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6afa38-b487-4656-90aa-256d802a3690", "sighting_of_ref": "indicator--cfda0c99-1afe-45d0-8dbd-b425ed6f3660", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbf63a6-7ac3-4606-9888-0ff5a0b7cbe4", "sighting_of_ref": "indicator--ce097b9c-2873-4998-8b7b-a491732ed893", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1455c97-c8b5-445f-b32d-e1d6d0a0dad1", "sighting_of_ref": "indicator--0dfa949e-80f6-4d5b-8ee7-f9e17882b267", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216f015c-6aef-4c74-8e1a-09cc0b338d90", "sighting_of_ref": "indicator--ef4ac622-3533-443a-8ee2-0201f462c2cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895963f3-0540-45d6-8e0d-c39c507758ef", "sighting_of_ref": "indicator--d154df53-7410-4f9a-8df2-5238a5b3e866", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a23f5f-95b1-4e55-93f0-ac5f122fa16f", "sighting_of_ref": "indicator--ccd37fa1-ada0-41a7-816b-22f32070d174", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe08670-a512-404d-9998-4b94cc517e85", "sighting_of_ref": "indicator--612a6381-f142-4606-ae1c-b7b304856ca4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7a9140-18be-4a9c-9a36-5779978f5fed", "sighting_of_ref": "indicator--608d8975-6e21-4de8-a8d4-a2dfc51f3bbb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f97aab-5c47-4138-ad56-aa6b1ce27d3b", "sighting_of_ref": "indicator--55b49d48-11a9-49b4-9bce-f00cb291cfc4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c2cf1-a6d4-453d-9136-83ea4cbc7551", "sighting_of_ref": "indicator--55b49d48-11a9-49b4-9bce-f00cb291cfc4", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9988101b-5241-48da-8164-6b2f89066631", "sighting_of_ref": "indicator--5aeeffac-ec33-41ce-92fc-5508bad58e59", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0016a1-0ba6-45ee-a862-65aa6eede240", "sighting_of_ref": "indicator--9ae18edd-428f-43b0-9e33-cd021c25d4fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4dd88b5-56f5-480a-b5a5-15dba5ef9b56", "sighting_of_ref": "indicator--2e5526f6-cdf2-4b21-9d72-42aa757c5763", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c14dfb-80bf-466f-9b82-f16344a487a4", "sighting_of_ref": "indicator--58c49ea5-6b5c-475a-9423-21f2990d8626", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf51a442-5327-448f-834e-b25e9af6b5ee", "sighting_of_ref": "indicator--e375cabb-5418-46b6-9622-866f052b298f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8855dfb9-4a22-44d9-beaf-06748c8c7140", "sighting_of_ref": "indicator--86edab55-6b00-4837-b6a5-7b9f7faf7ee9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842a2244-c72c-443f-92a6-c785a4f4e1e6", "sighting_of_ref": "indicator--ecd1520c-6bbf-419a-b1cd-255ccb0d4f00", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72061510-11fc-42bf-a71e-fb21a1180479", "sighting_of_ref": "indicator--1a239fc5-9bab-4cd5-870a-455588175835", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242eddc0-ab13-42e0-b837-ebd906947af1", "sighting_of_ref": "indicator--0d1c3771-7c5b-469a-87b4-bb46c5a0bb34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b875715-2510-469a-a7e9-0c9e17025c4e", "sighting_of_ref": "indicator--59a9c70f-1ab7-4285-8820-906527053ba9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aef3a24-f48a-4e2a-a0c0-67adb38933d6", "sighting_of_ref": "indicator--6974ec3d-a09e-4bda-ba7e-e9f446e9706e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25db9ab0-d919-4894-8b66-bb17dc6b15f8", "sighting_of_ref": "indicator--c31301e6-cc4d-45f9-a071-18432ece4787", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad59e6f0-25e6-4124-856c-6f47f659e931", "sighting_of_ref": "indicator--e70ebdec-0b19-4bee-a762-7f7331e303b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cdff3d-7489-46ae-b652-22f5c4f7f84a", "sighting_of_ref": "indicator--681a45ed-8ff2-45ac-aa95-6dfc1168f868", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a3bf6b-f637-4196-9477-018e68979977", "sighting_of_ref": "indicator--e48ab777-2956-406b-971b-f9d0e172c148", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2bb40f-abee-4356-b55c-f171b907bc6f", "sighting_of_ref": "indicator--0430c4aa-7237-4d7a-9e45-fa1e27a692ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaa2dce-741d-4ae0-b818-667ed3a247b7", "sighting_of_ref": "indicator--ae4de969-cbe9-4f64-afc4-222a9c48d9cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba686e07-a7d8-42d5-b6dd-4e1c5675c727", "sighting_of_ref": "indicator--7987da81-2d28-4285-b934-d30e52aa1ab6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45cfde1-a8c6-4373-a36f-8554977f4290", "sighting_of_ref": "indicator--b5b5d8fa-93fa-4c69-87ca-16c7c1ce1ba3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76518ccc-8ae9-4f40-83eb-176259f3bca2", "sighting_of_ref": "indicator--746b9e37-eba5-48f2-8c1b-7444ac3b4d6e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e09ba0f-6821-4044-8492-39d2e5e00001", "sighting_of_ref": "indicator--6bba632e-084e-4832-aa10-494dd3d90a4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ee7250-6921-4bc1-a9ca-5a41fc9b7e8e", "sighting_of_ref": "indicator--1703e3df-8186-4be3-9031-eee78148f35e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d9e12f-5d05-471b-ad91-e7617477d519", "sighting_of_ref": "indicator--46b4bbda-f8f2-45d1-b115-97c8a05371e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4240c31-84ca-40a1-a8e8-8bd3eec5733f", "sighting_of_ref": "indicator--6890e6fb-2494-4b60-9189-546011ed1e10", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2cc1f0-0ab3-4ec4-9751-f7d9b16aa88d", "sighting_of_ref": "indicator--71e707ee-82d2-4a24-bb1b-1e359940cc09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14067cd3-58d0-41e3-ae08-90bcf551e5ec", "sighting_of_ref": "indicator--aab9f56d-56a3-41e5-b1e5-c9b11ce0de6e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf930cd-da35-480a-9729-b2299eadf4c5", "sighting_of_ref": "indicator--d9fb519c-5c45-4c91-ab0b-909a6949099a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b9680a-5c9e-4082-a082-d40237bf08b5", "sighting_of_ref": "indicator--274ea4fd-ee16-4376-8ec4-17d6b4a0528c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18b981a-e82c-449b-b9ce-ee72e93ec967", "sighting_of_ref": "indicator--aca6dd9d-5c23-4741-ac8f-b2142b07c729", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc818ea-12a8-416a-ae65-25b15b54e0af", "sighting_of_ref": "indicator--bf0637cc-cde7-406c-be18-f88557bfa0fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c270ebc5-0c52-45fc-917a-4d20d94eb040", "sighting_of_ref": "indicator--4284a03e-126b-49c7-b3d1-5a0cbac90221", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1afab6-ff2b-4be8-bac0-c85f3e2dbdaf", "sighting_of_ref": "indicator--b6c5e8db-cf21-4ac6-8799-72e44e59a00d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751db010-9276-44a7-828b-1b207820d4a3", "sighting_of_ref": "indicator--4360d64d-bac9-47b2-ba52-cb7ee1340e21", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b844846a-6748-446f-8d1a-22bfc1751a44", "sighting_of_ref": "indicator--2e6c1fae-03b6-47c4-b2d0-06c087a4284b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c86215-3d08-48d5-aa92-f41cd5c7aa1c", "sighting_of_ref": "indicator--346a9894-d722-4c76-a88b-bbc250de8643", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d9d625-2e09-4400-87e9-78e2057b4f3f", "sighting_of_ref": "indicator--95c65bc1-26a8-4c6d-bbc0-11bb43c39536", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a027f51f-46d7-4023-a045-ec530261c156", "sighting_of_ref": "indicator--d5f152f3-1d08-4a4e-9f2f-4c2558ca98f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e58f03-d33a-4463-a2b9-2afa638484cb", "sighting_of_ref": "indicator--ed5a1b7b-9fa0-4192-9fde-0b2d5492e43c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c3268f-40a6-4824-b6f2-2640e2b643fd", "sighting_of_ref": "indicator--2001af1d-0e2b-40b6-b669-503729d96178", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc33cf58-d83c-4e81-ac0c-af1ee0ff6f6f", "sighting_of_ref": "indicator--8d0cdff8-932f-440b-9753-1ee462dc8fca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34306a9-c5ae-4d01-972c-deaae9389a51", "sighting_of_ref": "indicator--399ba1a2-7b94-48c5-809c-222b98edfc7c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307a96ee-f461-4694-83d5-b6e07f203ee4", "sighting_of_ref": "indicator--cd3221e5-cd2d-4722-ba11-9060d945ba17", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f2cf76-45c4-46ae-93dd-98626efdc37c", "sighting_of_ref": "indicator--12040481-fc99-4f7d-861e-8b3e8b9b013b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37088d1-20bc-4c3e-aaef-849f471e9ab1", "sighting_of_ref": "indicator--ffc4203b-f058-4289-9684-791ea698ee9b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161b4d87-f91d-4db6-922e-32b2d8a0f886", "sighting_of_ref": "indicator--9473c1b7-2246-4b01-a776-4558a5b0410e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bf2388-2a36-4133-8cf7-cf21d69254df", "sighting_of_ref": "indicator--c45083a1-4d2d-4ea3-92e2-949570fea1c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab327080-83b8-42ef-962e-9c116f0d4c5e", "sighting_of_ref": "indicator--d2774d37-7cce-4d31-a0f4-000c3fee48ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c8c9bb-956d-49cc-8d08-9eaae694858b", "sighting_of_ref": "indicator--2f294077-aea0-462a-85c0-0a3cc31571f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba27a517-1470-47f8-a6d8-b520e76389d5", "sighting_of_ref": "indicator--e3f0602d-8d80-4911-bed2-c60da9a85358", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dd6726-fa68-4c5e-bf85-24184e2f9803", "sighting_of_ref": "indicator--081ecdc6-294f-4f72-b367-73336353d316", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee965d4-2e55-4e6c-b0c0-de3c5f7a5afc", "sighting_of_ref": "indicator--62311767-5667-44ff-9ac4-80898a3627c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d64a26-bc2c-48de-97dd-b9f20706f5ef", "sighting_of_ref": "indicator--c2bccaa4-4858-4bd0-adbc-13a3fa6178ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8117a58-7a6b-42c5-8198-56d6d035dd70", "sighting_of_ref": "indicator--6147b5b8-678a-42d0-87a4-0cc702f0495a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527859b0-326b-430c-af8c-d4effa5ef5e0", "sighting_of_ref": "indicator--13e4451b-80c0-4d6c-b572-333dfa1be2d9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9627b4d4-688e-4365-a333-5fbb04d0f5e4", "sighting_of_ref": "indicator--d550d47b-8688-473a-b42e-e82bdca8ac28", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0e0ae9-560e-4c6c-8c06-6c5857ae91d8", "sighting_of_ref": "indicator--2d8e1d3a-df6e-4b49-a88b-fcbb62492d21", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f37155-5be0-411b-8f7a-07f46b1e87c5", "sighting_of_ref": "indicator--fe08e1ed-f1c9-45eb-9f92-408cffc828a8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c83338-acfd-4eaa-ab48-835ebaa5b93d", "sighting_of_ref": "indicator--6bec77fe-5b20-4869-9bc3-215f86567813", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee77cd8-08a6-4f34-a4f4-dbbb797c70dd", "sighting_of_ref": "indicator--314fdca2-295d-4a1c-a56e-e960247491df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9956a4-6b10-40a5-88fa-63febbe69ab1", "sighting_of_ref": "indicator--9edbd90b-38b3-4422-b17e-4677b66467ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9679e16c-b331-4a6d-93d1-f5491b64dd16", "sighting_of_ref": "indicator--70394471-8074-4ea3-85fe-8b1397028bb3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d524b6-f93d-4407-84fb-d2dc7cfee83e", "sighting_of_ref": "indicator--b5013b11-3d4f-4c19-96a3-d9c91d487f11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96638fd2-77f5-4185-a928-7e954284da88", "sighting_of_ref": "indicator--6264d4b4-cec2-4567-bf16-ee36532a5450", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2c3938-bdb9-41cc-a880-7798e3f4b985", "sighting_of_ref": "indicator--053c7689-4062-4323-9486-d9a3e579b7d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1894e1-5994-4217-9206-e58a33052f8c", "sighting_of_ref": "indicator--6686bcdf-ee5d-4985-b084-16c6884255c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8115072f-94c7-437b-bf45-6acdd21df82a", "sighting_of_ref": "indicator--8be4a2cf-62a9-4430-8947-1cf6559d6391", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f5cfc5-c832-43b7-b788-419ddf08d5f2", "sighting_of_ref": "indicator--b2b42104-31d4-4e79-a4a2-92191e37e0e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c1cbb-c1f7-4ca3-8033-f447d3333852", "sighting_of_ref": "indicator--6f5b66ce-9567-4434-8a9b-e94d6b1a902a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b97fef-7fc1-418f-b5bf-920789102fd9", "sighting_of_ref": "indicator--3c62eb39-4765-416f-b566-0c54e42db5f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651c8e93-abdd-4bc8-84f5-6d17acc52912", "sighting_of_ref": "indicator--50ab8b9b-531c-45ae-938b-cc7d1201d0f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e20257-8b1c-4bd8-b355-f1bed346a02f", "sighting_of_ref": "indicator--ca2fa4d6-6505-488e-b831-156b280bf264", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d987c131-b3b0-4e0a-ada5-d9818866b255", "sighting_of_ref": "indicator--3cf2b5a6-12f9-424b-8d5e-a600c7f77144", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5eb7f2f-e25a-4ff2-b9e2-1d91591ea143", "sighting_of_ref": "indicator--68827e66-a0d3-479d-af0e-00206f0ef45f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b321a5c-5f74-4e94-804d-f172b32affc5", "sighting_of_ref": "indicator--1ba45076-5ab3-4c40-87a7-f8fdfcca5bf9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffc1bc3-eb1c-42c8-9cee-d9730e76249e", "sighting_of_ref": "indicator--ddffef94-e65b-458e-9955-5f6a1c2a48f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a373782-dd69-437b-a4c9-9e137b3f5a65", "sighting_of_ref": "indicator--5f865bb3-62ed-4610-8cb6-29cb51441836", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd22566-43f6-4958-9936-ee7cb49d61af", "sighting_of_ref": "indicator--62aec344-565f-4c3f-b9ac-0f45c94530ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1aa11a-1432-46ac-bd0e-56f821e887b4", "sighting_of_ref": "indicator--c88e358b-e343-43e2-a9fd-dc614cc7f1e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b8bbf8-428a-45b7-8a35-99179340c24f", "sighting_of_ref": "indicator--8298fd80-9a31-44ed-b06f-0264741c268a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3bd2b8-cc4e-4ee8-b94f-d686ae90647f", "sighting_of_ref": "indicator--5fd59865-2db9-4780-9cde-efee6737c0b9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d30bbf-1e87-4437-9112-dacb95661a4d", "sighting_of_ref": "indicator--6eaca994-a1d7-4fec-b400-daaa61473807", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1434440c-4942-4767-9991-d956cc8b35b1", "sighting_of_ref": "indicator--c79c667a-e928-4efa-9cdb-8597d27c41f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c744d889-c73e-4b7f-a2dd-8c96d06af741", "sighting_of_ref": "indicator--80f659ea-2f7e-4604-bddd-4caaa65c9413", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c71adf-5dea-4ba5-9533-7ab6157499db", "sighting_of_ref": "indicator--a33438cc-56f5-4ca8-8f35-cabc72b57d15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6b76d3-07c6-42ca-9482-1dcf032534d4", "sighting_of_ref": "indicator--31abb92e-8ef9-4ea8-882e-8737837281d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02c95ff-d98b-4d0a-ab27-6ea4119b39f4", "sighting_of_ref": "indicator--500499bf-0c48-484c-8fbf-c5a16e608796", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3674db-e2fd-428c-a29e-5fdad5f6f329", "sighting_of_ref": "indicator--7763537f-8664-4612-9d13-21f7c3a257bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d77336-05e3-404d-ac30-25780bd2e474", "sighting_of_ref": "indicator--a6489d2c-2c95-485d-85de-5ce2b9fe15f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcaf7d1f-e375-41b9-9e97-a90d2c99d31f", "sighting_of_ref": "indicator--570fa892-f9cc-4b30-acbe-f7d8cf22ac53", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29c2898-0049-4114-8ba4-57fbef9cdd13", "sighting_of_ref": "indicator--af584393-e588-4e47-831a-776674e37565", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470b6b6a-8d8f-4259-b2d5-f1b201ca8461", "sighting_of_ref": "indicator--fa8ceba0-cb54-41c1-88d2-76e0bb0aab15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcaac8f-853a-40d0-8ecc-bb8edea708b1", "sighting_of_ref": "indicator--25523ddc-9020-4ae6-9248-e8e1f57b04ec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdee0ab1-b74c-457a-90a8-fd74bb981b80", "sighting_of_ref": "indicator--dd02e83e-c90f-4d38-b15e-7452515a08da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae98bac-9332-4a92-9656-800fed7a6615", "sighting_of_ref": "indicator--644e045b-e732-4cc7-9ab6-9188f14d1fcf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a384fa-a78c-42ac-939b-20f4ffa35eea", "sighting_of_ref": "indicator--5828e966-9f8d-43d7-8071-3a83026865d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e234e7-582a-4673-b9c4-09e7b4d4d7b3", "sighting_of_ref": "indicator--a65d5708-8edc-4e90-a41e-799bac259e43", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eb8728-7250-4910-9ff4-b54568ab8bf1", "sighting_of_ref": "indicator--9ee1d3d7-43cd-484a-9556-361fc006098c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25dfa12-c2b9-4af1-a59a-0664c96f8d05", "sighting_of_ref": "indicator--9c51759c-d025-4aa9-876e-5e4f15a30e39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cd7ad6-bacd-4336-84f8-68b9c5fdacb5", "sighting_of_ref": "indicator--96533911-3465-4e0c-807f-4aed7df46744", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ef7c48-e597-4e60-8c55-f72fa0b1e913", "sighting_of_ref": "indicator--3979f4f4-f8ad-49fa-b74c-95a43bc44571", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455fd9bb-1ecf-460b-a8cc-c70d129338c4", "sighting_of_ref": "indicator--68329d11-edc2-4634-b471-4f69e5735430", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac31b3f-e993-4728-b778-346ccabfc50d", "sighting_of_ref": "indicator--93af89ad-1546-4da2-8087-87ead5156878", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348812f6-d848-4e59-ae86-182656fcfa4c", "sighting_of_ref": "indicator--95c22a71-152e-462b-86ee-5b8399adca4f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b162ddcd-77a4-4423-8c08-62da2f257cfc", "sighting_of_ref": "indicator--de289c47-eb1a-4dee-82c8-f4a2fd0568e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ec3e6-9c2a-4551-bb98-2b328a1331a5", "sighting_of_ref": "indicator--1304f9c6-ac25-4bd1-9182-6170dbb0f475", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bacde6-a80f-40fd-8f68-89b93cdff915", "sighting_of_ref": "indicator--bbd019c5-6e54-4ce1-915e-e5ce5a655c2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fb012e-bbc9-45ac-832f-d9e6e0ce9b8d", "sighting_of_ref": "indicator--a575f7dc-91bb-47d5-901d-9305a250d8f3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b839aca6-7c9c-49d2-a6bf-b096ecd47efd", "sighting_of_ref": "indicator--70085e37-6202-4756-a8af-b79ada99b434", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9c6dda-e4bf-498c-a964-e12227f062ba", "sighting_of_ref": "indicator--b914947f-5851-4b63-a452-23d9c28d558b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1403d0-2535-48ed-8a16-9791a9b10d63", "sighting_of_ref": "indicator--86acb723-e5a2-455a-80bf-fe07e55dfa08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f303a3d-2d16-479c-a56d-6903c693c3c5", "sighting_of_ref": "indicator--6731618f-3f10-4e99-8ebd-9186a8961932", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42920fb6-7a4c-4c7b-9bcb-6b58bacee5c2", "sighting_of_ref": "indicator--6c07ae89-657a-484a-862d-2c7aaa3bb6fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb221035-7c25-448f-b32b-0a9dfac6825d", "sighting_of_ref": "indicator--59b80c33-115e-48a6-ad51-28627678a58d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f9fd6e-3f5f-4d50-b654-7dafeee7bdee", "sighting_of_ref": "indicator--6540c0b1-0cdd-44fe-a2c0-83a5eb3664b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6917375a-1c55-431e-9842-0ee8e350ae3e", "sighting_of_ref": "indicator--747644e4-329f-4c1e-83f6-fe8b44803918", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e740bd97-03a0-401b-a2ab-a0783c597717", "sighting_of_ref": "indicator--1ea745ab-a13e-4b34-886f-1b6f354c5998", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadafcb7-3dbf-4e24-9648-d7acccea0d0e", "sighting_of_ref": "indicator--48336140-fc63-4a95-8265-47d73051ab9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702a5933-bd59-41b1-a461-eb0c274eef3e", "sighting_of_ref": "indicator--0d37925b-39c0-43ea-91d3-b3e1e578b685", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d30653-1505-4b74-a0d7-29c6db79f34b", "sighting_of_ref": "indicator--a5d5c9c2-524f-4b6a-b133-fb1b6ce4777e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4cf4ce-10cd-4c22-9722-7c0c40179137", "sighting_of_ref": "indicator--cac9682a-723a-46bc-8645-002e302466a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779ab0a2-dee1-4714-b721-971d5f99d197", "sighting_of_ref": "indicator--e2dc9187-946a-4f6a-96ad-035f9c9c3be3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ab5b33-200d-4951-8854-bd79685275d4", "sighting_of_ref": "indicator--f07ea432-6ddd-4519-bd0a-6acc9cc52939", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a709cb47-7582-4105-bd89-834027c6c73b", "sighting_of_ref": "indicator--707bbbf9-b831-4929-a34e-f1d2539785b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2283f07b-e0ff-46c0-858f-08dafca31872", "sighting_of_ref": "indicator--260f16cd-b9b1-4d92-8448-5948defce1d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1c93c9-b7e0-4927-914e-7fbb66e3b3ee", "sighting_of_ref": "indicator--66312214-b6eb-4aa5-993d-9df4ffafe2b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172b2dc5-2b57-4602-b8f5-2eb22d1e1b1e", "sighting_of_ref": "indicator--b182ce2e-44f7-459f-b80e-9bb46ad95b93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8a0921-ba72-45c1-9271-2d12eb4d7368", "sighting_of_ref": "indicator--a16d7fbe-8985-469b-bab8-0bc11d2bca69", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e48012-132d-4792-a087-02aa9e0cdca1", "sighting_of_ref": "indicator--ceba9ccd-1a7c-45d1-81f3-82138b49dbaa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbbbda3-79cf-496c-b524-52caf9fe69ca", "sighting_of_ref": "indicator--bd761e83-36a5-4a70-b398-8746de8084e2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1d1dfe-bfdb-4269-aecd-716b01009b0c", "sighting_of_ref": "indicator--4b858c2d-dcbc-42d0-9864-108d50503826", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a9a5d6-4c9c-4305-9f11-c5ac6c7f2980", "sighting_of_ref": "indicator--97c1a079-75c0-4820-96e0-edc34e2905dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d44a11d-a0c9-4ff8-8f68-909ebcf71520", "sighting_of_ref": "indicator--921e9e26-22cc-434b-8725-7667925714fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2780b56-11c0-443a-b3c9-54bdb08b9dc1", "sighting_of_ref": "indicator--f9e24b96-b178-4180-b115-2d1388ad4258", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f50a163-759c-472a-b990-17a976551be8", "sighting_of_ref": "indicator--3848801c-4ae8-43b3-8150-697abc98841e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45d399c-d6ce-43d3-8d26-7c62fcef1ef5", "sighting_of_ref": "indicator--99404aa9-3b8a-46d3-a942-41a042a7e002", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0c2d60-c48b-44e8-9807-4b9e383bd3f2", "sighting_of_ref": "indicator--5dce3230-2fff-4b44-b013-7ac0e0920415", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594ad2af-5dd3-4dd6-afd5-8a77c82348dd", "sighting_of_ref": "indicator--ebd42e83-8f8c-4b55-9340-5ef24fe06033", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b4a319-086f-4a0e-9784-1e2f374c1ec1", "sighting_of_ref": "indicator--1198f21a-89f5-4024-af5e-4f314acd1c04", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0167bed6-6bcd-4978-a5bd-97488e37ac77", "sighting_of_ref": "indicator--e1decdb4-7657-4903-b8f4-0ddec429b623", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ad2dd7-1829-45d5-9b59-5341a783d042", "sighting_of_ref": "indicator--4bea1ea7-8923-4b63-a1f6-dbef342bda4b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89a8514-c439-4aae-b8d3-5ebeec7af9dd", "sighting_of_ref": "indicator--bec98451-04dc-49a4-8c61-71e922709d8b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb4f8e8-7ad3-4aa4-ba26-19b1401672af", "sighting_of_ref": "indicator--a76a6846-3dd2-426a-97da-3936b41e56ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f20ebe-6497-48cc-b549-5051f4770b83", "sighting_of_ref": "indicator--02f68677-42dd-460f-b869-7a7e770f9804", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aa3a9b-7283-4abb-abfc-a2e102e48841", "sighting_of_ref": "indicator--295ba64e-cda2-491d-80e5-62a34941e653", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b02678f-b572-4b69-ad5a-d10dbfbe769a", "sighting_of_ref": "indicator--78896d34-a228-4eb5-8630-b55fcaa2b336", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5946264e-3e70-4560-95d7-b5021bb12729", "sighting_of_ref": "indicator--0c410c00-eba4-4827-bc51-354590493805", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bfb057-4a5d-499a-95fa-3ca25a22f8b7", "sighting_of_ref": "indicator--5f34ba02-1849-4198-ae14-b8f1fa093cb0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75b39e1-59d4-4506-87a2-565d18e2abd7", "sighting_of_ref": "indicator--ad277ae3-3eb3-4e3b-8d06-bf6e34194a95", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd4a980-444d-4ad1-bf9d-f57d1a99b8a5", "sighting_of_ref": "indicator--83130e2b-a4fe-4a3f-a3af-9d6d0395da8e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0cfd1f-beef-45f6-b72b-d8b88f8b0722", "sighting_of_ref": "indicator--ebd70d80-a269-437e-ab04-ede71434f224", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb2429e-3204-4898-8d9a-38707b5635ba", "sighting_of_ref": "indicator--99f3575f-9ba0-4708-a218-29b00de14b90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3401c61-fa24-46dd-8caf-b55d6f4141a5", "sighting_of_ref": "indicator--746185fc-633f-4d3f-9e05-a4681d3e7d4f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb5f4c2-314e-4f74-afa6-b26d131136da", "sighting_of_ref": "indicator--6ecaa8cb-f548-4461-a000-9544b74d69be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ea16ac-e2e0-4d6a-bb16-f34f663b882f", "sighting_of_ref": "indicator--7fbba401-1dd3-4b3f-b905-76e7f185ecf8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461adfbd-996d-4b53-8b71-f637f2dde98a", "sighting_of_ref": "indicator--b3e774a5-d367-4c2c-9b25-b8de20039707", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a2ebb2-9866-446f-bdb4-ae4433cf7724", "sighting_of_ref": "indicator--3d2dae9c-88c9-4b49-b19e-84df1c5d6563", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d516bbb5-b92f-4a74-82f5-deb1f954925a", "sighting_of_ref": "indicator--9a15ef22-54bb-4ae2-b518-a32f83a6068f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfecb36-a201-43d4-aa49-b72c5b138cc5", "sighting_of_ref": "indicator--33a692d0-fe2d-4fd4-8cc5-7f5254c7182a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0fe7e0-f1e1-4b05-8432-08db6e5be7fd", "sighting_of_ref": "indicator--0491d254-379b-45e4-bf2f-ecdf8f50e68f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e98173d-bc9c-4e78-97dc-374776657fcb", "sighting_of_ref": "indicator--8b793640-11d1-4d06-acef-9d126bf2e1bc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880446a3-46c2-413e-926e-29b85628c222", "sighting_of_ref": "indicator--ebec5272-995d-468e-a5a7-b92a4c5addcc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269566a5-ca53-42b1-9293-55602a77a20f", "sighting_of_ref": "indicator--bf074fa9-4c64-4df0-838d-23ad60ddec3c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab752fa-b0a8-4e35-82e0-cd8f00b93393", "sighting_of_ref": "indicator--decb17ea-bb0d-4bed-9625-d6990d8a204f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28228625-ab6b-4b55-bfc2-e045da7992ff", "sighting_of_ref": "indicator--bdb73d0a-b123-46d1-8646-f987dfac4768", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6766671e-d277-484c-a10f-2b459dfb6895", "sighting_of_ref": "indicator--7e12d652-ff2a-402f-8216-626a6b00b478", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27540be-ae13-4644-8979-cabb3720d161", "sighting_of_ref": "indicator--31e3a105-2a3e-4b18-bdf9-e36acc4fdd7c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c33be3-8e65-4fea-8f2b-1649b0af09e6", "sighting_of_ref": "indicator--0b139620-daf3-4632-8ab6-6584d0c64c1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c4bd5d-168b-4f74-87e3-b2cd1da62882", "sighting_of_ref": "indicator--ab508e0b-3cbf-4f16-8b7d-6dc7ec660b7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ab0451-179b-47a2-9b2f-74488d7316a3", "sighting_of_ref": "indicator--0b5ef76a-c4fa-4db3-9332-560adea0ec58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dae1eca-1a56-4ae7-8f81-292aabf2a4c4", "sighting_of_ref": "indicator--7910d8f6-22c4-4db4-9ea9-bac52f2e40c2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bdc7fa-6d55-4ea6-9596-54ac137fbf44", "sighting_of_ref": "indicator--d3928822-d7fa-4eec-972d-5385b9aee8e2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ddae40-1503-4625-9a57-24bb4a0989b7", "sighting_of_ref": "indicator--cd5e5a8a-398b-4fb6-81cb-942a158ad6a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ee12e6-621e-4e1e-8f11-3c92362f4f1e", "sighting_of_ref": "indicator--988e27f8-47c9-4e09-9673-ee726f41f3eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26d5da2-45a3-4dd0-89ad-d1605ea09419", "sighting_of_ref": "indicator--f0da20b6-524f-4b92-9d50-a8747fa2233c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece805af-3481-49a9-8289-3f83ae644d63", "sighting_of_ref": "indicator--0a803686-d4f0-4137-9800-30e6d1d336c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0dd40c-375d-4821-a410-15cdb77f87ea", "sighting_of_ref": "indicator--99f28f4b-1832-4b9d-a067-4a6ae3b30f51", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c58e8c0-061c-4f9c-a4bd-da5fe0919bd2", "sighting_of_ref": "indicator--84edeb09-b30e-44a6-8e17-850fc029c7a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a1bb9c-1374-4323-bc75-69b22bcaa020", "sighting_of_ref": "indicator--a8c90044-1c10-49d4-a9d5-549ba0819c3e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a658d6-1f9a-45ed-b749-54e009072d4f", "sighting_of_ref": "indicator--6ee3d8ba-0a0f-43a3-8459-58316f47462e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6fc061-823c-4c78-a2fc-26bd0a23724c", "sighting_of_ref": "indicator--daf3cba1-f555-4fbc-ac48-5c4155640348", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9f8a9e-060d-4cee-868f-49b1acba7dab", "sighting_of_ref": "indicator--81850864-4b3d-403e-81ba-6e4994d7261b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c165ac29-0ebd-417a-8e4e-1b3a5ec8ac72", "sighting_of_ref": "indicator--c01e0fe9-ea00-4467-868e-734dce7c9e73", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6736085-ea47-42db-b4c9-d4ba03de9304", "sighting_of_ref": "indicator--16596552-1d9b-4364-a75d-6f1b00f62c6f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a0d083-5619-49b0-8e54-a9feb8c10013", "sighting_of_ref": "indicator--c6715e82-93f0-452f-9131-3aa1f2588d2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edfea93-cc33-40f1-ad5b-1c7b2f1c67e1", "sighting_of_ref": "indicator--b51ab60a-56b6-458d-a73f-ef75662541e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44911f85-b73a-43ce-a2b2-36351a609733", "sighting_of_ref": "indicator--be247966-804f-44ad-9508-28b1dfa387b9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b9ac6f-3d44-41d7-8da8-2c87b7c66399", "sighting_of_ref": "indicator--61c06188-4a4b-496d-9966-705e6a2b3e99", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8349b946-1497-46f0-a162-8f1697b97d10", "sighting_of_ref": "indicator--3774a292-932c-4e98-8973-7ae0febc52d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37539b2-0859-4c0d-aa35-abc36af08652", "sighting_of_ref": "indicator--2c6de4c8-50e9-4418-a9bd-8c61b79aea24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff694cc6-c004-4247-a52f-a758b8791a62", "sighting_of_ref": "indicator--9e236e66-02af-46a4-ba11-5771bcc367ec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f5a778-440a-43fb-a8b3-d22d9b0b276f", "sighting_of_ref": "indicator--5bde7f90-548d-48ca-842f-0ee1b02c29e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ff6d92-c22a-4110-9f1a-1ffff2dea754", "sighting_of_ref": "indicator--ce78de27-9c15-4b53-bf03-8b785d062dc8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846b50c2-3b55-4856-9ae7-78e564f2b6b4", "sighting_of_ref": "indicator--904385ef-b9d2-4c3d-a4ea-29a3e0965519", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095d66a2-6825-4ddf-afea-a11e3c46eea5", "sighting_of_ref": "indicator--36011f9b-889f-4f26-9265-2471df0781e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec4fdc2-ab05-4afb-8f2a-78d2d8688eaf", "sighting_of_ref": "indicator--2293a566-6398-48cc-87fb-926f829a6e8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eab344-627f-4518-afd6-560da7c355ae", "sighting_of_ref": "indicator--352645f0-2516-48f0-bae6-f99705eefe72", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deefedaa-6360-4437-b34a-5b826f455a72", "sighting_of_ref": "indicator--1cb81f67-8da7-4b70-91a7-0c6dd2061ff2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca6caa-691e-4cd5-baeb-804b3a424119", "sighting_of_ref": "indicator--feab3460-2da6-4770-a37e-d68b64d654c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6915f1ad-0172-42b7-a0f3-cf1232404e92", "sighting_of_ref": "indicator--88a4fc49-cc13-4536-94b4-2efb8d545ad3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f3966c-608e-4cf2-8bd0-5e31644cb516", "sighting_of_ref": "indicator--69224241-a553-46fd-8456-7ceed50a89c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e55a91-b0e9-46ce-a640-68afaf61c038", "sighting_of_ref": "indicator--516dc80d-d4f8-4e7f-ad91-f778832b739a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9701fe9-99be-46d5-9599-16e7e670ace1", "sighting_of_ref": "indicator--3e110f85-caeb-496f-9ead-38413451140f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e862a91-15f1-4648-b8c2-49b0a8cbf9f0", "sighting_of_ref": "indicator--b2086bf4-ecef-4673-b549-678881c68a2a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66d3ab-f85d-4cca-90cb-6c889d4225ce", "sighting_of_ref": "indicator--5161e874-94ac-475f-acc0-f0edda9b5fe4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb44311-3125-43cf-829a-ca8edf009954", "sighting_of_ref": "indicator--2aa7370b-5452-4812-a54d-fe05038c2ee8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab795157-943a-47f9-8355-6c35dedabc1b", "sighting_of_ref": "indicator--35882dec-5838-4d0e-b100-e31bb788ec5e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f3a248-8c1f-4fb0-8447-6154b3b7980f", "sighting_of_ref": "indicator--bc1bb8ff-b36c-45d6-bd3a-80185d3b9fd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954445ef-2ca6-4d27-b263-931cf80a6a26", "sighting_of_ref": "indicator--09de0779-3d87-4b79-ba90-969c6629df19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20af7bed-2d1a-489f-a9d2-8eca698a7e68", "sighting_of_ref": "indicator--3b100233-5e4c-41f0-9f6f-542c1d104ab9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fdf104-eac7-4e27-8880-1536f655b99f", "sighting_of_ref": "indicator--561ee3ea-e476-4c4a-941f-231005701e2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7a9151-9527-44a2-9e90-69e9c520c187", "sighting_of_ref": "indicator--c60641c2-d990-4069-b657-fabcc81bc13e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098c6b00-727c-4c0b-a840-796a7a22ce30", "sighting_of_ref": "indicator--7c8d89eb-42bb-4621-b4ac-8c2d305b51d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd69e9f6-ea4e-436c-a84f-91a8e9c79907", "sighting_of_ref": "indicator--77e7bfde-5a2f-4fec-add0-e66d67ca6dc6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9db2c8-a96f-4de3-8064-16692692c042", "sighting_of_ref": "indicator--d5858d80-afb0-43ab-8a95-12db3f15cd3f", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501cfff5-24ec-461e-bcb7-8c480d387baa", "sighting_of_ref": "indicator--edf3b56d-2d3a-4b9d-ae61-584e18d79150", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0330b769-0fc4-4e3d-bd1f-12200a00a979", "sighting_of_ref": "indicator--8bd45c79-5b65-4b51-91da-d8d1c4437e83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac070c74-c1cc-461b-b20f-e831313a392e", "sighting_of_ref": "indicator--893f0139-558a-4110-8b1e-67af9a68e967", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1233b528-a5bd-40e1-9895-62ae4fdc8832", "sighting_of_ref": "indicator--f4bee417-0bfd-497c-a34f-4b33ed6d0351", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34599ec-4362-492e-8cd2-1f084e83ff0e", "sighting_of_ref": "indicator--c96667c4-8ef2-4913-9367-6867f25a4e4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4ae871-75b4-4eb4-9790-2e4af9e1c2c5", "sighting_of_ref": "indicator--ec23bd6c-e988-467f-b4a5-bf0e0c78ac3e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1c4893-4e29-4d51-b87e-ba7b9e6d22a8", "sighting_of_ref": "indicator--c1b46cf3-b51e-4372-861f-9024a1a560ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f197a32-9c52-4ce9-9be0-680088c43622", "sighting_of_ref": "indicator--76cd16af-a4da-4d87-841a-b93043c25eec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899dcd92-d819-4df4-925c-4cfa846208de", "sighting_of_ref": "indicator--4b705817-709c-47cb-9287-edabf6e5ccd9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f53ef-6a11-4d30-8a4d-46fb60472db3", "sighting_of_ref": "indicator--7d0ffb18-21f7-4c33-82c4-35e053b6b12f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34737bb-af58-4105-8e4f-92be8c70e2ee", "sighting_of_ref": "indicator--8aa8fd8a-aec1-4acc-b911-ccf901e0a18f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a924cd5-138b-427d-8558-9a861fec46c9", "sighting_of_ref": "indicator--c6508e31-0323-4e63-ab10-17c802e61f1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449e5bba-28f1-4994-8f57-ad608d1d68b2", "sighting_of_ref": "indicator--d696eca4-056f-45b4-9233-9a05d3b3c684", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58fd3dc-6a08-47b3-98d9-48e9d00654d7", "sighting_of_ref": "indicator--272e2eb5-ed8f-4240-9d8a-8978a9bb5ba8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b72660-986b-45f4-8aef-ece0636fb5e7", "sighting_of_ref": "indicator--8870f0eb-94cb-4fdc-86bb-7681c36064b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e97338-40c7-4fee-93d6-257eac4fe8f0", "sighting_of_ref": "indicator--b9df5336-51f6-4219-a972-24cf30d44883", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eac893-45cf-4906-bd55-0c6925ded8d1", "sighting_of_ref": "indicator--c77db93d-db4a-4058-afe8-6f6fbdea7011", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7feae0-ba58-43d1-9792-0450b2fa73f6", "sighting_of_ref": "indicator--b7da89a3-ed6d-4ad2-a8d4-d5dff9fbcb10", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286a650e-4633-4fbe-b00d-7e96b97a4b6e", "sighting_of_ref": "indicator--4e45e3d3-760d-47fd-b631-f4decee4dcc5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efb8d64-8551-4e64-aed6-a89d808f97c0", "sighting_of_ref": "indicator--02bd29ec-16ef-41a1-bf57-43a838c9b66c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43af3be6-67e0-4b42-b16b-4a927f7932fc", "sighting_of_ref": "indicator--5c66d5dd-4f1d-4ac2-ac32-9383ae954200", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b48ea51-dd6d-498a-ad62-ca19c9530d31", "sighting_of_ref": "indicator--c251bfc4-77a8-445b-a05e-87e4b5b9c6b5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56e5651-133e-42b9-95e4-5870ac1ecfb5", "sighting_of_ref": "indicator--26c180be-0d64-4967-84d5-a52739f15f4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f711c677-d286-41fb-b16c-2f024844cc87", "sighting_of_ref": "indicator--e05758b7-24d6-493d-809c-c53b5f105579", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83650671-407d-4f38-a4b9-4aaf9f0baa69", "sighting_of_ref": "indicator--05bb6f54-92c9-486c-88f4-44be19917d28", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da73c30a-eaf8-4c9f-95d3-811115086a32", "sighting_of_ref": "indicator--b602d21d-b84d-4996-8229-845493ea7c26", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a49e79b-8469-44ce-a0ec-dce32c2179c7", "sighting_of_ref": "indicator--6942fe3c-62af-4ebd-bb7d-e0db3531f6ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4b2bab-27e8-413c-bc73-89404905d6e0", "sighting_of_ref": "indicator--6942fe3c-62af-4ebd-bb7d-e0db3531f6ae", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac58c8d-ab7f-42ae-a2fa-baca0a0d6e32", "sighting_of_ref": "indicator--23420da3-730b-4ee0-b4c2-ec66eb899198", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78082bb-6c24-4d5a-956b-b96aa5a0204c", "sighting_of_ref": "indicator--23420da3-730b-4ee0-b4c2-ec66eb899198", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc99050-13be-4ead-8251-26d7909bcebb", "sighting_of_ref": "indicator--f16cb0b2-c174-4d4f-80f4-019f872134ae", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccecbf5-9f4c-461f-96be-3b8aa5d97ef2", "sighting_of_ref": "indicator--d3c745fd-dd3c-428f-90af-7cd5d5268a5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9664ba94-5400-40da-9ae7-92b2e322d339", "sighting_of_ref": "indicator--bd99334d-4202-425c-877a-a42351df1881", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3d5367-96df-4a9b-9038-084358ad128d", "sighting_of_ref": "indicator--0fce1c68-2ff4-422e-b2a5-14af9d1ec24a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2297a9c-8bce-4082-a7f6-3456da0fe117", "sighting_of_ref": "indicator--472e0fdf-2cb6-4f03-9269-7b7c6da49c2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edb9369-b77b-4316-be28-f0c98a335f8c", "sighting_of_ref": "indicator--036bf97a-ccac-479e-8fb0-a2140f79218f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebae4fb5-7b3d-458a-9e66-5997de13d2a4", "sighting_of_ref": "indicator--a2861b27-231f-486d-aec0-5770aac75ca2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed3ca3b-070a-464e-8b1c-b5e4e2521b01", "sighting_of_ref": "indicator--59b482ad-0ecc-4c15-a405-e4562ee35852", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a727e29b-231c-441a-97b6-f68ce2e2b51b", "sighting_of_ref": "indicator--59bfb45d-1aab-4960-9828-605d30b1f021", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caff61e-3eb6-430a-81c4-7c862cf38210", "sighting_of_ref": "indicator--5e79409c-e54f-4a39-99c6-16fa516de63e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066ab975-ef8c-4de3-bdbd-0702802d9d4b", "sighting_of_ref": "indicator--e0f5d963-0139-44f5-a146-e8e5ec0928b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b179b5-c56f-4f8f-99e3-7c983920c633", "sighting_of_ref": "indicator--b0023378-4d37-4df1-9a6c-41924962198e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41950cdf-7920-4fbe-a158-381764b8ea91", "sighting_of_ref": "indicator--01445c88-ebe0-457c-9769-692c69526385", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27764a98-c075-4588-817a-f7d9f0abb22a", "sighting_of_ref": "indicator--62231650-8585-445f-a605-713813db7f0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572a53c6-c6d7-4810-a1b2-a423bc0db6e0", "sighting_of_ref": "indicator--d57e491a-1d16-4076-8c50-f94ef28f1e36", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97d74fa-2f22-4d35-9ae4-7ad359e7308b", "sighting_of_ref": "indicator--819510fc-0119-49da-8afc-f8a0db15ab39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20f78bd-5d10-4a96-a14d-fd4f04c96580", "sighting_of_ref": "indicator--738a7c9e-57ed-4504-a29f-70d9a524fc0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f5a5f1-e7ef-45b6-9cd2-bd37d7a9cb47", "sighting_of_ref": "indicator--3de063d0-5d9c-404a-b8df-a9b3fdf20a96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec61a0d2-a2d0-4c20-a85b-bdae209c3509", "sighting_of_ref": "indicator--0376773a-5f75-43d6-a04e-05b908ded68b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a0ccb3-0fe8-4f2f-b5e3-80a3bbea4ba2", "sighting_of_ref": "indicator--e23c490b-60a5-44c8-aa4d-68152a79d0b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6e4e86-98e7-42c3-b600-d7f152a837cb", "sighting_of_ref": "indicator--4123a513-e730-4ea4-9d56-92d69b4af09a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6453569-1589-47f2-a55d-224c43a86796", "sighting_of_ref": "indicator--7ddbdd05-3dc4-4952-91a7-cbb9129107e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e858f9-d03f-41f9-844e-5a1a5a385e60", "sighting_of_ref": "indicator--6310cd66-b33d-42b1-a80c-b53e35b9966f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca062e-1959-4e36-b827-602e58552560", "sighting_of_ref": "indicator--26a29cc4-1d3d-43c5-889e-67e60d960f3e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b3c85-ff82-46fc-9b5c-eb41677b7041", "sighting_of_ref": "indicator--ab606652-df66-40ed-8870-f4a3b5bdc296", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4021f7e2-b63b-4d37-90ca-21424522a8fc", "sighting_of_ref": "indicator--87689f51-3518-43a5-af04-1e7fbddc0077", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77517f39-f883-43c3-acf6-ba9e4d93d882", "sighting_of_ref": "indicator--9806a79d-155f-4362-a9fc-0b565c69fdf6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f379a020-45e1-4fd2-bd9a-a2d862f085a6", "sighting_of_ref": "indicator--58bb8bb0-7b79-4661-a13e-bcfaa2337002", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd61f0af-3193-41ba-8626-6749ec57bb2b", "sighting_of_ref": "indicator--e255592c-7a42-4688-83b1-016a823e1d86", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6885301-4bdc-448f-a16d-5fb4462711e9", "sighting_of_ref": "indicator--33958adb-80dc-4770-990c-15c86b70e2cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06a322f-3da6-4476-88b3-aef7c9a0992b", "sighting_of_ref": "indicator--18a74045-d7b7-4ada-83f5-75faf3e7d5f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82316c2-d658-43df-93c3-c9034a12d60c", "sighting_of_ref": "indicator--150ade14-8605-4e94-8ef5-d85f78ef51f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7c7a62-e910-46ab-978e-575092468eec", "sighting_of_ref": "indicator--2b965bd3-65af-4a66-b5d2-4309ea6527a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795243c2-13ab-490b-bfae-1a8eaf877621", "sighting_of_ref": "indicator--e56a59c4-3d66-4d5e-b419-c3e64c6a06e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76734f6e-69db-4604-95b1-38dc3e8c744b", "sighting_of_ref": "indicator--7cda69a0-10ec-4268-9663-566bd440f2ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f67199a-9370-4c17-b87b-6fc06c561af1", "sighting_of_ref": "indicator--d82db83c-8267-4dc9-8a6d-341cd6d79862", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c0bd50-d872-4944-8c96-408a4a36fbb7", "sighting_of_ref": "indicator--0aa61b88-a4f0-4cd5-8354-3820f0f5d6c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbf991e-e6cc-469b-9d9b-490cce3b4bc9", "sighting_of_ref": "indicator--5d488126-9445-4817-9355-424ceca93578", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21fa3a3-0d13-49e4-88e1-0afb497e86e3", "sighting_of_ref": "indicator--4a70ffdd-9875-4967-b2e3-3ae88c768cc0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970730cc-09a8-4351-bb49-a9c411a0f96d", "sighting_of_ref": "indicator--cc634732-046e-4c0f-8847-77b7b2d51793", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa03961-1af6-4688-a030-c3bf65e17ae1", "sighting_of_ref": "indicator--119f7b1c-0461-43d2-acf6-87556d800231", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5574afc4-e2d0-4d7c-9f76-f2f05c6c0c4d", "sighting_of_ref": "indicator--09431a1f-a6ca-4379-a7ae-a81a26f39918", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e833064d-fe38-4e63-9a7a-1105e7bea6c8", "sighting_of_ref": "indicator--b4f7ce04-fd5a-4d6b-8d1a-b1fcb9b13b0f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8a2254-3ac6-4c75-9d64-1fb403cb6da8", "sighting_of_ref": "indicator--298ac6c2-430f-4a3c-b4f6-34fe9cefb0f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9a8451-e068-45bd-a459-850a4a753bbb", "sighting_of_ref": "indicator--4e88dc52-3043-413b-9158-614b85ad5661", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae573ea-339b-4e29-a1d4-e12cd9d55c90", "sighting_of_ref": "indicator--d73349a3-347e-44b8-94c8-867cd2e7b85b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87dc76aa-d53a-4c4b-856b-5638cf16752d", "sighting_of_ref": "indicator--4679652f-03ec-495f-a027-f5e88142b4ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594fc0ca-ed83-46c8-9f08-1c57a88b6a87", "sighting_of_ref": "indicator--74551fa2-945b-43b3-85d0-824f52b71bb7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e610bc48-4041-4f77-8ab2-557ebb05a9ae", "sighting_of_ref": "indicator--f34bf972-3030-4894-b228-0b12444a4f0c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549c768e-3828-40cc-b179-88e648415c63", "sighting_of_ref": "indicator--ccb48367-0a5f-441d-829c-6fb4f6fa834e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526130dd-d58e-4040-968f-61d92fa6846d", "sighting_of_ref": "indicator--c641f135-38e8-4620-bdae-b2018468bf83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fe32ad-1633-43ff-8dd0-00388750aa5b", "sighting_of_ref": "indicator--873ff3d9-bb02-49a8-adc9-aba5e81797d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bc509c-6d72-4848-b350-68789776c768", "sighting_of_ref": "indicator--d3162d15-2d07-4c91-b16d-cde3638457aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d83757-27d5-4b60-bca6-d5bc36eb2e09", "sighting_of_ref": "indicator--2ff597e6-ff57-430f-a949-5e48cf838ed8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbfa4b1-30d9-481b-b9cb-d716e855f712", "sighting_of_ref": "indicator--5eb3b642-0269-46e2-8ee7-4970a82e7eb1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17fb5cb-9280-4d43-82d5-f6a92266d13b", "sighting_of_ref": "indicator--d53a3864-74e3-485d-8c50-31999fbde510", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a799b822-a3ff-440b-acb0-86bbe6c788e3", "sighting_of_ref": "indicator--f6cb3c09-52f0-437d-a9e3-fd9096c66898", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de03f92b-c6b1-40dc-83fd-3cbce66f9395", "sighting_of_ref": "indicator--a2ee686e-bc17-4dc8-8503-6c1c371cd61b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39dee54-a9d2-4180-ae7f-e9302d9460d9", "sighting_of_ref": "indicator--3878a738-508c-420f-9cf1-8fcf2c7a6ee8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8de549-2239-4fe8-a209-8e2feeb6500d", "sighting_of_ref": "indicator--ee8b076e-154a-4956-ba96-76584230d489", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3759e3e-c27a-4f94-8c9f-f470f96b6cac", "sighting_of_ref": "indicator--26be4443-e654-45a5-ba48-33fc673e4eca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d27e13-68b9-48a3-9056-b47e33a83592", "sighting_of_ref": "indicator--78aa45e5-8b05-43ae-9fa9-de44cc50ff80", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15abbfda-756a-4f2a-a034-8b13aeddc5df", "sighting_of_ref": "indicator--aa02d695-da64-49e0-aa5b-4eecff7485db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b12a30b-0e3b-4e7b-88ea-f3fa01505679", "sighting_of_ref": "indicator--c1eb8a25-bb55-433d-9d55-cb5a5340db58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2735d55b-8827-4f11-a01e-3cc98dbf9a25", "sighting_of_ref": "indicator--92cc54c7-e903-401a-9653-7b418ade2867", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21bdd52-77dd-4019-a16e-d82b1d2fd935", "sighting_of_ref": "indicator--d5564e3c-ca0d-4c13-a365-b94a11305bc8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd818f49-bcfe-4342-9c73-1db472b5589c", "sighting_of_ref": "indicator--92075380-7672-406b-9a86-dec661a0e945", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5e55b3-9972-45e1-bea9-76f554b5acad", "sighting_of_ref": "indicator--95b1f4ce-84f3-4f02-a7a5-b7494608be48", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e42910e-6739-4632-8f1a-d3d4a65d9b05", "sighting_of_ref": "indicator--6ff0140b-927a-4dc8-a481-ed2338e4518d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8a3fc3-b51a-403a-a9d1-4b76f3675f11", "sighting_of_ref": "indicator--04291dfe-f337-4f13-a87c-c4485304d243", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12af720a-01a3-46de-b03d-906b5f41563f", "sighting_of_ref": "indicator--8c2844d0-2037-4821-8294-8ee756681955", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b54ede-cd2c-4e21-b890-e3f7ccd46797", "sighting_of_ref": "indicator--f710fc39-fe5a-41ef-817a-ee6411f21499", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e454b675-9b33-4233-b3a7-1b0836dc8382", "sighting_of_ref": "indicator--10ce2805-8409-4060-8c4c-4f5065bd7f87", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8b24a5-2d6e-4990-89f8-6cc456fe7945", "sighting_of_ref": "indicator--e1d91bc8-d769-4bd0-8d03-4fd4a7fab78a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af89b4f-8e42-424a-a5c3-0e3e197784f1", "sighting_of_ref": "indicator--057ac73d-cc6b-4664-afc8-30ef908051e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a22736-224d-4272-99f0-a3bad548aefc", "sighting_of_ref": "indicator--18a34760-5f10-45fa-849d-63d7d444c46c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add1ce67-6ae1-418e-af3a-bb529761813f", "sighting_of_ref": "indicator--4c2a4c51-ec98-4d27-a890-01cc365faf94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c127a15e-fc6e-436a-a169-cbfa2dff11fe", "sighting_of_ref": "indicator--7704c4a4-2de5-4526-bd9f-e0c6d26c19c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761af3a7-8eaa-4750-987c-a8478fcbe1f3", "sighting_of_ref": "indicator--9e92300a-c814-4ed2-bae7-40825a5c8952", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd212d2-5ec2-4678-b33f-8a80d2750b37", "sighting_of_ref": "indicator--d1ba585b-6caa-4d93-82b8-764951afcfee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ceed8-b699-4e32-9692-032a02b08761", "sighting_of_ref": "indicator--3f85681e-9d77-401d-a929-3f7e74ed80d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e81d15f-4967-48e4-8c0f-e65d868f6d39", "sighting_of_ref": "indicator--1d4e9e03-70c9-4e1f-84a8-0af88239486c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0337b1-b73f-4240-a2cc-e009ae0dee86", "sighting_of_ref": "indicator--908a8d51-719d-4d46-a7ff-2394ae02676e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a711b4-89e8-4037-bc19-18c82a1bc328", "sighting_of_ref": "indicator--df522ff4-5fa8-49b0-a5ac-fdf661892287", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e380328-0da5-4624-9fec-8a72bf8f4f47", "sighting_of_ref": "indicator--0a9af00b-2b00-4e61-a964-cb435d7fb3f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d91a032-27bb-49d8-bb5c-767832fdc7c5", "sighting_of_ref": "indicator--349fd3a3-2585-4f59-b9f8-c867bcc1cfef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6660b79-3b95-4360-ac3f-bf30020890db", "sighting_of_ref": "indicator--5aca44b9-1d0e-442f-b625-44f8c3fe2943", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a87dba6-4927-462b-b623-6b3de3052de2", "sighting_of_ref": "indicator--b85710a8-595a-47c3-8f57-c80e6546f868", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acf842e-4dcf-4cb4-9654-e979cec97aa6", "sighting_of_ref": "indicator--75ab887e-d1ed-401e-a4d5-a31f9b26ee01", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ace61e-a83f-4eb1-9b8c-1f4052688f47", "sighting_of_ref": "indicator--35d6e34e-44dc-4dee-905b-4a6c7dd7cad1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dada1fb-2b91-47c9-970d-c455c894fdce", "sighting_of_ref": "indicator--a9856bfa-0c7c-495b-a920-c6609792cb2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02f5a8c-c20b-4b71-9c38-f89f5cf9c399", "sighting_of_ref": "indicator--9ff6bd3b-0666-49f9-a2ba-00917356df11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cecefc-e83a-4a50-a6a7-9e5ac6d5e217", "sighting_of_ref": "indicator--47c297df-5dde-4fc3-af09-3336df5af118", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc38e9cc-9f16-411e-a68e-cb1175b05dc6", "sighting_of_ref": "indicator--b29d65c8-00f2-4c73-b680-d8f0615e065a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b398e3-aec3-4742-bfe5-493382487bde", "sighting_of_ref": "indicator--8724489f-a9e3-4c97-8588-18c395f823f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319c277e-0491-4fd6-85ca-aca39b950b17", "sighting_of_ref": "indicator--f0d70971-e261-4883-9be2-c38490b561d0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d778ae1c-9173-4fb9-8dac-93797bd4cfc6", "sighting_of_ref": "indicator--92a13e29-0014-4458-a52e-fcaf6b22c912", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dfea67-e2c3-4544-ae85-628ba4d815a5", "sighting_of_ref": "indicator--5bc33000-20d6-4187-aa2c-943ba5486b5f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15716705-3e9f-4608-9ed6-9ede1c09c71a", "sighting_of_ref": "indicator--249cb382-a5b2-4c22-bce3-1d2b1b3269ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ccf374-8a93-4959-8481-4566e1454826", "sighting_of_ref": "indicator--d7ef5565-bf33-4c10-8f66-ac0d18fb0813", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0757d2a1-a9ef-4520-b9e1-559ec4ee8a24", "sighting_of_ref": "indicator--55960eb0-d65e-4caf-ba0b-15d7e8d350e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007d43a5-042f-47a2-b0cc-0e008e18dff1", "sighting_of_ref": "indicator--fc3c491d-0e6c-4b0f-af3f-0fe05ba717c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b56cc-a852-4c81-8867-8cb42618cecd", "sighting_of_ref": "indicator--ac18f37d-d478-4b77-8203-2bcb3b1985de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bdcd2a-b2a0-42e3-8266-8e6b51588b49", "sighting_of_ref": "indicator--cb204db9-07a0-4f52-9aba-7a2a912b601a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120a9cff-2710-4ea0-98a3-4438de935787", "sighting_of_ref": "indicator--5ee02328-6816-4784-a542-4b319c3dd701", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5367a566-34ec-49d9-b306-2781f14a65d9", "sighting_of_ref": "indicator--219db08c-9bf9-4205-8726-8dd171c87422", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c41db7-e568-4bdc-9af2-641546d7eb77", "sighting_of_ref": "indicator--38d25903-4ebd-44c0-b26a-32eb97244c23", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a929a115-7b2a-4a48-a6d1-39047fc31fc2", "sighting_of_ref": "indicator--6a223477-6f46-4229-88bb-10c644f9da32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6823698-38b0-4615-adff-161b843815f1", "sighting_of_ref": "indicator--be159d19-bc66-4ea1-8502-cb950244ce83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c4734e-aee1-44b1-af44-3cc9cba2cf71", "sighting_of_ref": "indicator--17e82b80-597c-4d6f-b794-bcea58911464", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573b1631-c47a-4a78-93e9-e53dd9c6f944", "sighting_of_ref": "indicator--a139b124-500c-4e31-a83f-bb352ff4f9ce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1c2bfd-0450-40ac-8a4b-5d2be8b6948b", "sighting_of_ref": "indicator--9dd99ad3-e075-43bc-b067-13f4afb34a11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b440561d-f686-4316-82dd-6952e060e1e2", "sighting_of_ref": "indicator--2e80f3b6-6bab-4850-a0d6-8e8d02b6e1a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272ad461-8a7c-4e4d-95da-99b2c94e0af0", "sighting_of_ref": "indicator--827649dd-718e-47b0-a278-f63f6c337e10", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1085e2d2-1bdd-44bf-a318-5d04c3b980dc", "sighting_of_ref": "indicator--6471a195-9990-41cc-84b3-f064b1e428a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa1128c-23c6-448d-8426-fc323ba44ce0", "sighting_of_ref": "indicator--04d2e724-272c-42eb-a18c-93a0df7ee92e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0d3976-d182-4db0-abbb-5abbe1bfb717", "sighting_of_ref": "indicator--f77028ee-d98d-47ed-bd12-0e0df045bea9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8342a79-80d1-4a81-9a57-487e94b5ee2a", "sighting_of_ref": "indicator--9aba4853-226a-4afe-a18c-9bfb6daeb375", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205fa1b0-f9e3-4cb1-87d5-f9e42ce56144", "sighting_of_ref": "indicator--cf571d21-8d03-429d-aa69-17e064cfe075", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3424e8-4efa-48c8-878c-bacb09d28cc4", "sighting_of_ref": "indicator--6b915bbc-9799-4058-82b2-82cf097aca5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977d82a8-8e76-4633-afcd-4c17513bad1a", "sighting_of_ref": "indicator--81f35dd9-ccab-4ef8-85ed-f7177ad209b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d77c108-2ebb-4a9b-860e-85836ad33104", "sighting_of_ref": "indicator--52d0fdd4-ea62-43de-a2d4-680ca7fe1fc1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf02b220-194a-48e8-a560-1d457c0c6afc", "sighting_of_ref": "indicator--e6b48bfe-cd2e-4b9a-b34a-5fa733137a16", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0906a3b7-d20c-42bb-8f74-dbd7d4d2677b", "sighting_of_ref": "indicator--2899805a-b31c-496c-bb7e-c2b4a3075ea0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdfbe64-a74a-4849-86eb-f6c37c5ad886", "sighting_of_ref": "indicator--a384c3b0-fe4c-47b0-a142-6a7630b92bed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa5af77-df12-4a30-8dcc-cab36076ffc2", "sighting_of_ref": "indicator--78112fda-61f7-4659-985f-aad4dbca1bd8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80adca07-21b5-4162-9549-95e44bb7f31e", "sighting_of_ref": "indicator--11e5ba84-6f16-4014-8726-e38fe1ffc8b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fd0818-e492-4f04-b4d3-dab17f4c3bd7", "sighting_of_ref": "indicator--04208078-2265-420c-9ac3-f07a1faae9b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ca7880-65b5-4abf-b608-f379e3856923", "sighting_of_ref": "indicator--cba459b8-2f32-452c-93cd-673fe97f8f78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae2724b-b751-4b9a-9c0b-38efb5a07161", "sighting_of_ref": "indicator--c5545cf7-12d8-4daa-b970-e12a34f2c11a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02be0ef-bf90-4a08-a2f2-cc7ca5545569", "sighting_of_ref": "indicator--7e2b748a-a0f4-4b21-866b-51ae29a988b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a03fc29-890d-4189-ac47-f57f0cbf979a", "sighting_of_ref": "indicator--25371893-887c-4035-b29f-e6be35d9746a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f35ff8-4a17-46db-af06-2f09b2fc6698", "sighting_of_ref": "indicator--ebacbb56-99af-451b-b3d9-4a665d987c4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e728929d-c750-4328-9cbd-026e2eeaf7f4", "sighting_of_ref": "indicator--acc2934e-dafc-404b-a584-c38b5fac135b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eda4eee-be10-4fab-b586-f48ae76a4d4c", "sighting_of_ref": "indicator--f1373294-68d1-4bf0-8d86-a5ae83b038c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe18219-4956-438f-bb54-2532532a868c", "sighting_of_ref": "indicator--388c8895-686a-4fe2-a513-12c38fbcd3c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2652262-80d5-4f12-ade5-59b8c229402f", "sighting_of_ref": "indicator--a098b9df-fed3-4aa0-9f1f-7c246faa85fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010b27b1-7d5a-4875-95d5-fc715140fd5d", "sighting_of_ref": "indicator--eb38bc24-bfe9-4d1a-9b80-76f35c4d377b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dfdd31-4fd9-4df1-9a95-ad59c47e3b42", "sighting_of_ref": "indicator--617d4f4b-9f4e-4e7d-9a7b-866857fe54da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90973588-bfd2-4ac7-b717-c32a0f39a33b", "sighting_of_ref": "indicator--c9bad390-a8f0-4083-879d-7a7149f224ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46fe4e4-f36c-4721-9069-308def7f83ee", "sighting_of_ref": "indicator--fe2c9f31-b243-437c-9c30-2e7c126035b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b3f2ba-d37a-4b0c-a194-e6c7d7b35ee6", "sighting_of_ref": "indicator--d01b1b4c-0f7c-44dc-92b8-1a2a71e5e23e", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71690e4a-cae8-44be-ac3f-6c7fbe16665f", "sighting_of_ref": "indicator--450a6f76-3dd2-4522-be03-93b6c3f93849", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddff8f5c-9ac3-424e-8d74-dbfcda119e71", "sighting_of_ref": "indicator--ecd47b9c-5895-4610-ae70-4718c019d66c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ba789f-75b1-4085-813a-616e6f831989", "sighting_of_ref": "indicator--7ba62bd6-0df2-457f-9b18-1d1094b06467", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3c3a31-b538-4aca-9dfc-5a331a28b7b8", "sighting_of_ref": "indicator--3fd53485-ddc5-4d6a-a62d-4b2750c9cdb9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ac275-0c17-42e9-98c9-6919fe260c2f", "sighting_of_ref": "indicator--2a3628d3-fee8-44c6-bbfb-09c2415aa6ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bc2518-3b80-4467-8829-da77689c2530", "sighting_of_ref": "indicator--608e5d89-2261-4ceb-830b-21d9f84f02c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e502328-c90c-43c5-8299-c7b6ea04cab1", "sighting_of_ref": "indicator--9311355d-f6ab-4803-bbc4-bde1f9999f0f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e397d7-7e32-41bd-8f34-d64ea719d1d8", "sighting_of_ref": "indicator--8bb8a9b4-8ef6-4a8b-b582-1a53a17ae680", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76283330-5f58-4406-9821-91ea4f67cd4a", "sighting_of_ref": "indicator--5755fd6c-33b1-4b97-a47b-52ea12e7e278", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28961294-bb54-4e4f-ad80-bf0c23f12fcf", "sighting_of_ref": "indicator--7afa5e08-72b3-4a89-a67d-c485b0fb5d02", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be70bd6-f027-402a-a991-2979cf86cab7", "sighting_of_ref": "indicator--e98c7c37-aec9-47fc-86e1-7b61c7c9021c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ef2757-061c-49a8-bc41-9d3ea9e0ad69", "sighting_of_ref": "indicator--5296aed4-612c-4444-9c0e-cc890676263f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad137c18-4415-4ed4-9e32-6d0c3ea90ba6", "sighting_of_ref": "indicator--a92a68d0-797a-4135-946f-e8946195439c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df563b0-0233-4d0f-90b8-9b0718187b58", "sighting_of_ref": "indicator--1200171a-8ce6-465e-b37c-9bf5e1d43c76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296529ee-7eee-4afe-8ddc-574bee0af9df", "sighting_of_ref": "indicator--4ca4d28b-1209-4cbb-acda-e3ee783c1409", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c7f161-a2d5-4a41-83a6-0c73f11667af", "sighting_of_ref": "indicator--a7427f11-7472-4612-afdd-3538734fb8ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f280c2-5ba4-4bb7-b4d4-985261054770", "sighting_of_ref": "indicator--9be56fff-4a5c-48b5-99c4-9ba77dcea1ce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c6e10a-9f73-4dcb-8df5-53d3445121ad", "sighting_of_ref": "indicator--39fc2f72-72f4-435b-89e9-3d847bdad4f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dabe39-9344-46e1-90e7-b5bca61978ea", "sighting_of_ref": "indicator--71ecf60e-b645-4455-91a2-15bfd520c8a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd682ce-05b0-4d53-8d5b-e517eac2922a", "sighting_of_ref": "indicator--569e5ea9-d1d4-4900-9c70-d673a75619f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a7fe2c-3343-4a72-ad3a-61fab12d35c1", "sighting_of_ref": "indicator--f160d729-6873-4330-b167-11756f410ed3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513783d7-8b25-4670-b2e4-278f80fbadd9", "sighting_of_ref": "indicator--a033a460-26e1-455e-a499-27ffd38bd82c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798dce6b-0032-4e7e-90a8-2ca3a67d7d24", "sighting_of_ref": "indicator--54b9ebf5-2698-4dbe-88b7-50a3ff19622b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c9deed-578f-4988-9ac5-53c246b35926", "sighting_of_ref": "indicator--78fa980c-188c-44a5-8e27-b3bab0aa6d4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c630ae0a-146d-40ae-b81a-f39483ce8412", "sighting_of_ref": "indicator--68216966-15af-499d-82f0-40f7484c7f71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c917d6cc-c9c7-43a6-bc8d-8066dc9b1266", "sighting_of_ref": "indicator--d7b2bda5-f754-4673-8127-8a6d91a3d525", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f67335-4c3f-4677-8238-df874cf4d042", "sighting_of_ref": "indicator--f5114b62-57b1-44e7-913d-7236c69e75d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae40abc4-8fa2-417e-ad81-06f49d8d96b7", "sighting_of_ref": "indicator--399397a4-f5e5-4dcc-9e0c-432a55626cf4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efac8fb-20fe-468e-8ed6-3d143a2078b6", "sighting_of_ref": "indicator--78106875-062a-405c-bffc-8aff211a9009", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0968e38f-23ab-4ffd-ad1a-2b29d962828d", "sighting_of_ref": "indicator--575ca14b-a54f-41bd-9510-2bf269374764", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa68de0-67ff-43da-9ee8-ea8a163defc2", "sighting_of_ref": "indicator--a979c577-2fe4-4000-924c-6eefe3951ecf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248f4ba2-e2ea-49f9-9f3b-eaa726f13c37", "sighting_of_ref": "indicator--09ef9130-d25b-416a-b9ce-66d44ce15d46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23fc605-2602-4d21-83d2-d1767acee31e", "sighting_of_ref": "indicator--3e352f88-fdd1-4c91-a494-c01738204b0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046e8e74-6ab0-4b08-9e16-f626fe5f7d75", "sighting_of_ref": "indicator--221f8723-1bb4-42ac-ac8f-0309db01800b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3012fc-d0b5-4b4b-98f8-bdff060c2893", "sighting_of_ref": "indicator--67c59f24-4d00-4da2-8dd0-46238a3b10a7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab111259-8e87-4a64-9970-e5b02c754696", "sighting_of_ref": "indicator--59a912fb-e5bb-4079-b73f-390bdc5f5c20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151bea8e-6a98-465e-b278-97e451f5f9ec", "sighting_of_ref": "indicator--84c74bc0-e26a-46f7-b79c-cea11c215065", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bcb22f-c5a6-42f2-a674-3b7b744df1a7", "sighting_of_ref": "indicator--476bdc04-a835-4e2b-ba3d-51e8d463eff2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7199ec-2729-428c-a9e0-8f15047bb596", "sighting_of_ref": "indicator--78ae2295-d275-42a4-8b9f-6914b0f7bc5d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9dd9ed-0114-4701-aca8-bbd9d9070458", "sighting_of_ref": "indicator--fd245c7b-3bfb-4f44-af25-6e3c27dadc64", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5511dac3-6de8-464a-a028-de1664a282cf", "sighting_of_ref": "indicator--ca0b9790-78ef-4e32-b698-7b1d4824f6f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0959d755-dda7-43cc-bc65-12f68ab5ce3a", "sighting_of_ref": "indicator--09330aa9-d2fc-45da-9579-e84dd524b02f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0176669c-48ab-4cb8-95da-88f7235a7c0f", "sighting_of_ref": "indicator--6172f5d0-b4c6-4365-a471-9d8df3b9203a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059f04da-387f-45b2-88fa-ad3e7d1f6e45", "sighting_of_ref": "indicator--ee4bcd77-59de-4acc-94d8-713edae93509", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35b7772-f038-4d80-af93-bfc2e3dddfeb", "sighting_of_ref": "indicator--382ce2d7-131c-4363-80b3-bbbe0eeb54fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9cc2b6-f4eb-4413-b225-9f79b4c68743", "sighting_of_ref": "indicator--bb5e0682-d7c0-43fd-bee3-262e207e32a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c871a58-0c61-4b5a-bd54-6739b17e8f69", "sighting_of_ref": "indicator--23644b8b-698b-4151-88fe-19fa2a569d4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b6b9ad-1194-43f5-8a78-76d7e156557c", "sighting_of_ref": "indicator--3dafe349-3569-44e5-af7a-a9bac1c21b44", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d11ab3-56a9-4ec9-b8eb-7eca98586942", "sighting_of_ref": "indicator--2213d9c2-5391-4f46-a4d8-2421394049ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d2c84d-c11f-4cfd-b7c6-48de20dfbce5", "sighting_of_ref": "indicator--9e45f53a-6c70-4ef6-bcb3-cc57199aa629", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547a94c7-1383-4b91-b9b5-981a0396cde2", "sighting_of_ref": "indicator--18fef6b6-698a-4551-9f62-d43c7e087baf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60afea4-2e3b-4442-b26e-5c3388dac788", "sighting_of_ref": "indicator--38927ac8-230c-42cf-88f4-0ebf80732a81", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55343585-c4bb-413d-920f-ac4253b38839", "sighting_of_ref": "indicator--18b3d220-d959-4263-b577-217ca125358b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d540bad-f3a8-492b-b588-06adc305845f", "sighting_of_ref": "indicator--4f3799e1-2edc-4dd1-bce9-a8cafd94707a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73eca399-5965-4676-b28a-523896755455", "sighting_of_ref": "indicator--e2806d8c-1321-43f0-93ac-ee06c8bcb08f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9502a06-957d-473d-a300-17736cbe7a34", "sighting_of_ref": "indicator--b24bf12e-e2f3-4d5b-98e5-37e580fa21f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d20727-9f59-4d05-a272-463d1396526b", "sighting_of_ref": "indicator--965c3beb-ce0b-4539-8d1d-3ed07ff42349", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485ac4c9-913e-44a0-817e-1b77063762a5", "sighting_of_ref": "indicator--20629868-2422-42d3-b26e-7ab8ef914f88", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dec103c-f445-4ae3-ae6a-85965f42112e", "sighting_of_ref": "indicator--68ba3165-eb20-4ce5-b528-0142205849af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0e8f29-a0e7-4ae6-b254-c52f4825696e", "sighting_of_ref": "indicator--958cfc15-8812-4e57-8d41-e897b64d6fc5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e554b4-1387-4982-8a67-c7a77ccde11e", "sighting_of_ref": "indicator--b619d964-3821-4e9b-b292-c3f61d1c0e1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe75b20-4542-4472-9261-7e1d5a99a381", "sighting_of_ref": "indicator--f29a5bd6-8a0d-4c4e-8308-297a550ddc3a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0f29e3-b853-4717-a6ca-55650cd7f398", "sighting_of_ref": "indicator--3d40134c-bbeb-430c-9099-ba439001ec2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a673911b-7e3f-4fcc-9e44-97ab3295fcd5", "sighting_of_ref": "indicator--9e474eed-6036-4d33-b602-26c38cb147f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1891e66e-56ac-408f-8a05-3a6af9c245d0", "sighting_of_ref": "indicator--3be761bd-cc04-4188-a7ce-1079fae46f1c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e36dd7a-6a2f-435f-878b-db154a7cef94", "sighting_of_ref": "indicator--d9086bab-1b6e-4f9e-9beb-4b0be8a5f9e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476536d8-0e9f-4013-bf65-b86905830ca2", "sighting_of_ref": "indicator--99afa86c-4418-4dfd-85fd-93754094e94f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab92ebc4-067d-415f-b7de-48f0ee798432", "sighting_of_ref": "indicator--9727020c-98b3-448f-bacf-aaddc07ef501", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b33a60-e1da-4233-8a06-a8a098c27ef5", "sighting_of_ref": "indicator--011e11ea-c27b-4deb-8b18-d82c6f914641", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccb46bd-e1ae-42a8-b9f9-ab8e2f4e13ce", "sighting_of_ref": "indicator--48ff5aa4-0d37-4a2c-91d3-8bd595fed8e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077117d7-0ed0-4fd4-a84a-14b28e2437ff", "sighting_of_ref": "indicator--31cb63ef-160c-4c18-b13a-31889403f828", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5105fa2-adf8-405a-816a-4b578f524d27", "sighting_of_ref": "indicator--de008492-0a4d-4e9f-94bc-0ed0aa13c52e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99732d68-528b-4999-acf5-63e0055b508e", "sighting_of_ref": "indicator--736466fb-026d-4e46-a8c9-6787e4f94876", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102cb247-9875-464b-a806-a492df5d2df8", "sighting_of_ref": "indicator--6f31a9d6-74fc-41b8-9797-f3b1be26b737", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479285c2-de6a-4fb0-807f-13e9fdcb9e86", "sighting_of_ref": "indicator--86e40f36-7fca-41ba-b325-6ca24cfd2a3d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e28e63c-1c3b-40d6-80a2-beec3148bdf8", "sighting_of_ref": "indicator--90265749-7f6d-48de-9f07-d5e2ff8c15ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6a2778-768a-4a46-97fb-495517b279c1", "sighting_of_ref": "indicator--b409c4fd-f569-4b39-a52f-6af2a6392d6b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3d0fbe-01a4-4bee-9215-dad12cfa4d4f", "sighting_of_ref": "indicator--c40a087d-89c6-4fb3-8609-8ddeda974e2b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25287b4d-f194-49bc-bb6c-8b7f1e1bd488", "sighting_of_ref": "indicator--f6984706-aba0-4a02-8789-7f69fe9f03a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df3b3dc-9d55-47ee-887e-dcdeffa728c3", "sighting_of_ref": "indicator--6e336420-7446-4053-8b1c-1711181b69de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9633e5-b0fa-4f9b-adde-939efb04c39a", "sighting_of_ref": "indicator--a17467f4-4c4f-41c3-9ec9-3d03b1e16522", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72066415-2536-4106-9048-7f32623b240a", "sighting_of_ref": "indicator--196e0a0c-857e-4cd9-9337-5d2e3f832e98", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a676be3-f3c4-4e7a-b8b3-f103035af58b", "sighting_of_ref": "indicator--e0ae7d0d-ba17-43b8-95bd-f98fa8634d1f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bde13c-2646-4a2e-807a-3c8c8ac8815c", "sighting_of_ref": "indicator--7c6304d8-9d8c-4a55-960e-6416cc567c86", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a792f87-4a9b-4fc1-bcbd-acc902f13b85", "sighting_of_ref": "indicator--4cfdc088-294a-43c8-bda3-93071c86f3cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb673f8-4777-4278-8462-1ec71e13ac25", "sighting_of_ref": "indicator--b4163ba1-b6b6-4384-9862-633e98a5675b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e212124c-c849-489b-be32-3444478a3a35", "sighting_of_ref": "indicator--ad356567-d362-41fd-ad01-3f6d21295254", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733bfa7c-c319-4e03-b8aa-878f6668f829", "sighting_of_ref": "indicator--6a864896-f244-434e-a718-c8497c921c91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2463c5da-c4e4-45a2-a302-f91d1402521e", "sighting_of_ref": "indicator--fa473032-a1de-45eb-a6d3-c8779dea08ad", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dad115-e19c-44bb-9ba2-df46d1a075e0", "sighting_of_ref": "indicator--122dc76a-0b64-4a1e-b05f-b896a64c1d08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf6867b-4b16-4381-97df-763c8fb9bc6b", "sighting_of_ref": "indicator--11d3646a-d4e9-4676-adb8-2b81db6d5e99", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a615ffbc-68a3-47bb-bd00-46048841922c", "sighting_of_ref": "indicator--11d34d2a-9f39-4b63-a2c6-7845c93cc616", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4368422-7e4e-4cc0-a0a4-ff2c87050880", "sighting_of_ref": "indicator--1598c34a-1b3f-42ab-8ba8-c185d5174051", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f76a08a-7ace-40d8-8179-bec57cda5a9b", "sighting_of_ref": "indicator--f1d066e7-6a6d-4e50-a8dc-12c95198ecc9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2429a8d8-577f-414d-83e9-ff7a13534a1d", "sighting_of_ref": "indicator--f7e1adca-e1d2-4b8c-b666-a1843a36d979", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2616cd3d-bc35-4131-936c-7231aa12248a", "sighting_of_ref": "indicator--90bcc7e1-7f99-4563-8102-8c628e6c8a3a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a284a4e-d6cd-4e09-b0c5-4f6e400e798f", "sighting_of_ref": "indicator--9009a413-44f0-41e6-864f-136bf5d1edc6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5819fb-b78d-445b-9b9a-a411a379c9fb", "sighting_of_ref": "indicator--066fc91b-7fd1-4f5a-a994-9be775680172", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9803e229-26d7-4be2-bb78-44ebf54ee4cd", "sighting_of_ref": "indicator--fd9d8510-194e-4f93-bdb4-2d3a569b4235", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456723c4-bc93-471f-8e4c-3d3d0f2fb78c", "sighting_of_ref": "indicator--1bd7b81f-4ea7-4a70-96c5-575621d76d2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1303e8-a34e-459f-94a4-ab2172174836", "sighting_of_ref": "indicator--f9a82bd8-9ae8-43f3-a448-ee9cdedd66f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1206f8-57ae-4a20-b62e-ee392e34bea5", "sighting_of_ref": "indicator--23188dee-28e5-4d81-8758-4c6af210a01b", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed89f63-adaa-44f1-974b-a3b5ed93847e", "sighting_of_ref": "indicator--8ea5a119-bd66-4b83-9ee6-712b454617c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b550178a-b9aa-464c-a872-741c09ee82f7", "sighting_of_ref": "indicator--f9ec078d-fc6b-450f-a488-4393f78daaa3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f3ecd7-f118-4306-b56e-687233a55fe1", "sighting_of_ref": "indicator--08fbb69b-cd78-4d00-9276-6dc148ec25aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6f7a17-faca-41ac-b935-f77d65b75a82", "sighting_of_ref": "indicator--1dbaeb60-5f00-4e37-bd65-4fb63ca4cb04", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bc472e-8f0d-4120-ab98-9b0fc02ea5f2", "sighting_of_ref": "indicator--a9afd804-c15b-4b98-836b-9d539330261a", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60165051-dc3c-4923-b239-f65fc63418bc", "sighting_of_ref": "indicator--64d34dfc-7179-4aad-94bc-d6bc04ac4bc9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72f0eb2-b71a-42ab-9162-1f700f2151d7", "sighting_of_ref": "indicator--a8d1abc1-e0d4-43c9-8347-f084f8302004", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b249978-88ff-4f70-908e-cf29c19e540a", "sighting_of_ref": "indicator--f49da857-75cb-444d-98a2-448c9bdf6b4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579a8a4f-13e9-481e-89b5-72197497b800", "sighting_of_ref": "indicator--e1c2acec-179b-4d29-a425-750ac0cc9855", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd71bfd-b22c-42df-bd3b-d21929b6bb90", "sighting_of_ref": "indicator--c08dd607-b5ad-474f-bec2-d80680f4898f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184d7687-57f8-49a5-84c1-8b3e4584b1ce", "sighting_of_ref": "indicator--c0553d49-3204-4ede-9f56-ac612b556106", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d17ebc5-96de-4d4b-a66a-6fcf31f7f1e2", "sighting_of_ref": "indicator--d73e2465-0c58-4be6-9e35-fb8dc4f1f382", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7554bf89-7d79-46c1-8a89-4986b84d72e1", "sighting_of_ref": "indicator--8ed8e6c7-f0de-4163-88a5-c097c3995002", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddb91db-1c73-415c-882d-0ddc46a927e8", "sighting_of_ref": "indicator--8b28aeea-20ee-4b8e-b338-e90421b95a21", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d842b5-8ac8-46a5-8656-273b5239f448", "sighting_of_ref": "indicator--d85737c4-e35b-4d2a-8658-8738cc2b7fd2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd1c052-3574-42e6-9256-de1d0423a787", "sighting_of_ref": "indicator--956b256c-83fe-4c52-baf5-d8d48a7a8282", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a830fb92-cf9a-4fc3-a5eb-8dd50f0fadbd", "sighting_of_ref": "indicator--b874fe7f-fd6b-47a1-9abd-7882f19f54bc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720d2c09-c700-438a-9582-9b1e929d6ff0", "sighting_of_ref": "indicator--e02fc50b-2584-4bd3-be3f-7c32cc653e7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f65bc8-836b-4b27-bc16-e8f69518db53", "sighting_of_ref": "indicator--eb820119-0015-42a6-aadb-23e1157243c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d54510e-7d32-4cf2-9151-a6341976eda7", "sighting_of_ref": "indicator--a7107d7a-d92a-4ca8-953e-cc57db54f8c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d13ff-7a33-417d-9e48-3bcedd7ccfa5", "sighting_of_ref": "indicator--fefc61de-d81f-4a65-b232-a9715df6c937", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e74beb-19d7-441e-a0d3-2df4d533a43f", "sighting_of_ref": "indicator--5faa18e9-e2cc-48ad-b8d5-64efefd057c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d61b24-1eea-4e52-b1c0-91ba91478057", "sighting_of_ref": "indicator--2a78eb1a-ee0b-48b1-bcc8-71b66c784314", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73efb24-624f-43f3-8ce8-ad96ef2f49d5", "sighting_of_ref": "indicator--fbfba438-9412-49db-a6a9-3af1757100f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9138be7-0fe4-4b59-9fdf-7edb1685c16a", "sighting_of_ref": "indicator--63c8e890-d818-4902-920d-f2c7b7c254c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8312272-fe31-4cb9-8700-2a000258d47c", "sighting_of_ref": "indicator--851bce9a-2e0d-46cc-91fa-f616a86cf030", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5849e0f4-885e-42a2-826f-c050045e61d7", "sighting_of_ref": "indicator--05a36982-770a-47ae-b16f-608a3ee73087", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baca6bf7-cee5-4acf-86be-2047f567a119", "sighting_of_ref": "indicator--c19e341b-dbe9-469b-bf73-5caf40990bdf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3231a14-e316-4788-9e65-64a2b262be87", "sighting_of_ref": "indicator--02a94f43-032e-463c-9067-386209fef9ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092569e1-b9a9-48d3-8e8e-0beb1af1b0c6", "sighting_of_ref": "indicator--8f4985d6-21c3-49b5-b026-129fefe86c9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36be8b94-091e-4bc4-82d3-1c5c93405c00", "sighting_of_ref": "indicator--df811f16-91b4-44dd-a9b5-a8fd9361d890", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a63805-d249-4c73-8482-214e151de8d5", "sighting_of_ref": "indicator--064179dd-f7e5-4ed3-829c-aee8e279f62b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0eaa06-7dbf-4234-8215-ebfea6659245", "sighting_of_ref": "indicator--4516d48a-4a8c-4019-9795-0414318720b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e7450f-8572-421a-a1f7-17c9fa52283d", "sighting_of_ref": "indicator--fcb12ef1-6890-4d22-aaa8-310f3c00a27f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d841b9f0-7034-4ad0-b9bd-b9ab50769274", "sighting_of_ref": "indicator--7c478461-9363-40dc-a89c-7f5c6a88f80d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94d3325-464b-4c6b-a40c-d4d9fcce167f", "sighting_of_ref": "indicator--8a07d3db-9ce8-41e7-a6e8-79df9ad4b223", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ae9bf9-e3fd-4731-b79f-9fe1bae7b385", "sighting_of_ref": "indicator--a4cab14c-8aa5-4df9-9161-6f7e0ea27487", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63efc1b-be5b-4e6a-8283-7071d808b13c", "sighting_of_ref": "indicator--d0e935a5-410a-4e40-aaeb-7a3c8aa2554e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0cfa2e-4f72-4f20-89e7-d77166ed3ee2", "sighting_of_ref": "indicator--da1fa751-d81b-417d-b5cd-e8c06045f089", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8eee5e-fd1f-4f00-82da-bd11eb726561", "sighting_of_ref": "indicator--23567e2d-28b2-43a8-b232-5aebc3f133c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ecf4d9-4dcd-4b0f-90f3-0e0ebdecac9a", "sighting_of_ref": "indicator--c01cc160-f150-423e-a90f-08b95f716800", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39e5c8b-c441-4ead-91a9-2ad1bf1e5579", "sighting_of_ref": "indicator--abfdba98-d7a9-4d38-be45-8f8ac410dfa2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2249c43a-cfbe-4d23-a43b-faf0cad8bf89", "sighting_of_ref": "indicator--709483fc-c54a-477f-91e8-763646799f41", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b70d64-fef2-4030-b6c8-dbe88e18bbc1", "sighting_of_ref": "indicator--88fe632b-bc43-44d3-ac8e-47da8b664b31", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635286f8-af79-4f73-bf4d-839e5ccaa0b9", "sighting_of_ref": "indicator--ce17ae0d-39a5-4122-8570-3ff56abb5f12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab668f7f-53ef-4f65-aa6a-86e226cfa8a4", "sighting_of_ref": "indicator--930a69ef-0307-4c1c-87b2-3c7372519f89", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4499d89-ede1-43b1-81d9-27960bdfa902", "sighting_of_ref": "indicator--ea5faec6-b8ac-4400-8974-dd6cfec7c4b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18e8551-2461-461b-9b2a-e41e7b0d6704", "sighting_of_ref": "indicator--e0d204ff-8a44-4319-a452-29082f970128", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84df3a4-44a4-4af8-ab47-40016a353728", "sighting_of_ref": "indicator--85609bc6-a776-4a7d-9759-3888593b1556", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaf9acd-6e60-4ce2-a69c-07f6fb8f2f3a", "sighting_of_ref": "indicator--8430bd18-d759-4a0d-9b75-235749eff201", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388f2d8c-bd73-43a0-af44-355fa048ef54", "sighting_of_ref": "indicator--19a71f7f-4632-4f18-a23d-be734255b951", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b84e55b-dbda-46d4-8551-59a9a4eeed9c", "sighting_of_ref": "indicator--26eedffd-a591-42b5-819b-2188ab44286d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d01b36-adfd-4b34-aa87-e0e71b37bf83", "sighting_of_ref": "indicator--0f2c7788-e314-4f61-8def-956faff9cb34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0b207c-1ab3-4459-854a-ff616f80ba8b", "sighting_of_ref": "indicator--dce0ff3a-80ea-48c5-90cd-8fa0c8df66a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8253ba-669d-4bb0-b8c7-73dc5bbade82", "sighting_of_ref": "indicator--ef54f406-8bdf-4d53-acae-d6166c3446ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89636333-ce73-4dbd-bee3-027f9e7d9e06", "sighting_of_ref": "indicator--0da9b51e-e551-41d8-9646-05683bf58919", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59a7580-3d19-41ec-a464-b86cdc1c2446", "sighting_of_ref": "indicator--c835ad88-dc25-4083-9f27-6ed35f2730b9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd82b00b-8081-4269-af0a-1957dfce00ca", "sighting_of_ref": "indicator--ec7165bc-118b-44b4-81e3-3950cecc124d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ac89b6-2a94-4078-95e3-f56635dabdf9", "sighting_of_ref": "indicator--0f9429a0-9597-4bf5-ac73-37683b053712", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640ea7d7-ec35-4b20-8001-af4c11f484df", "sighting_of_ref": "indicator--54cf5b00-0be6-4d39-a7f3-05ee33a4b685", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728c7d98-64ab-421f-b720-d0145a844483", "sighting_of_ref": "indicator--f4dbc6e4-84db-404d-a720-b7e9ca28ed01", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be375b4-301e-44ea-9801-9b7c23961666", "sighting_of_ref": "indicator--ab229709-be96-4289-8691-7079e8b2bfda", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4565681f-0199-48c5-b38f-a74739dd75ad", "sighting_of_ref": "indicator--cc0a62c7-d4da-4552-88fc-31bdcd48e524", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b0516e-dc75-4f20-8c11-a4ad8a88436a", "sighting_of_ref": "indicator--d35095cd-ce63-48ff-b88f-cdcedf038002", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24df2919-872a-4861-89ae-e9e5dbef4b9e", "sighting_of_ref": "indicator--963ddcad-9296-4f2b-96d3-067b6eb38fb4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298f30e1-249d-4ec9-a52b-9a95d121c256", "sighting_of_ref": "indicator--84e70d59-77dc-4a2c-93c2-c15a153926d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd22ac3-026b-4924-87e4-b48c7bc6a770", "sighting_of_ref": "indicator--d4598108-ee73-41b6-aced-e70dd23481ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06de8235-a27c-497b-9572-d6bfe276d584", "sighting_of_ref": "indicator--1fe251ff-7630-4921-90aa-c11692fef38a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80663d8-44e8-406a-a3b5-4f95ad201167", "sighting_of_ref": "indicator--ff953cb1-1ecd-413b-a16e-2d09c66c0ea6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f42b9c6-a12e-4119-8620-9903daa01564", "sighting_of_ref": "indicator--d36e15bf-da49-4c89-a737-614e3b97e80b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e7e458-44d6-4d36-98de-4662ce9cd87f", "sighting_of_ref": "indicator--053eb33e-1820-4abf-b321-180a551e311f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878c7522-e39a-462b-8765-85912b080c50", "sighting_of_ref": "indicator--cefc8b96-30c0-4e6b-848a-a99d3fbb85aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354eaf05-f2e1-48d2-a439-ec14e0678464", "sighting_of_ref": "indicator--6ab3114b-0476-4661-aa34-4f6990ab388c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b9d260-e1ee-4915-b30d-65aa89bd12f7", "sighting_of_ref": "indicator--9a1c7de5-3dd8-41b2-8dbe-1a77e649f40b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319e2063-6124-49b2-bf97-0b4e6f044d4f", "sighting_of_ref": "indicator--06298f40-02ce-4158-b0e6-88ce312974c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03491f17-5053-471e-951e-f91c032903ab", "sighting_of_ref": "indicator--c8a6a048-ac97-42aa-b5cc-11bbd5749eb9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abb1963-5039-44e3-a5b7-e60a255a15ed", "sighting_of_ref": "indicator--a6a08fb3-bae8-4770-b716-7bc71d207a84", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e764405a-5bb7-4783-b638-9e8da2bfcbb2", "sighting_of_ref": "indicator--dc5f60ae-e94c-44fb-b21f-ca5c0f04db57", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84672d0-e885-4bc4-9296-2c6db5fea5c9", "sighting_of_ref": "indicator--0f374a40-c3f5-4da0-a430-089509ee4416", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54b508c-ced8-4563-b321-27de0dc9f1c4", "sighting_of_ref": "indicator--3b423550-b797-4523-a37e-312f59f591b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6c309f-64ed-45a7-aff4-0acf5be12e8a", "sighting_of_ref": "indicator--2bfd190e-40bf-4049-964b-cc4dd10071dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9771d631-2045-4a1a-a185-fab3ac24c7f2", "sighting_of_ref": "indicator--0adef979-50a0-4c47-af1e-28c71f27f2e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3f83c5-8913-4725-9852-abf9a6dfc83b", "sighting_of_ref": "indicator--20f5e9c7-5ff1-4c7c-8de6-9c13fc825e29", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1f8243-29d7-470a-afb6-aa3666a10f0d", "sighting_of_ref": "indicator--1ce5f6df-641b-4075-ac10-104abce03c1a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d2f67f-9d9f-42fe-b9ae-77ffb08d4d96", "sighting_of_ref": "indicator--a411b447-2f82-4f46-9172-75f301f5a743", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afa9baa-b909-42ce-9c25-26eae8fbe380", "sighting_of_ref": "indicator--ba91716f-2af4-4b2d-a26a-55af3395593c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd89f6e0-4472-4672-82c5-7ca476569f67", "sighting_of_ref": "indicator--40e94ee1-321f-47ff-adce-5e7454a70279", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed22a7f-03f3-4aa9-94c4-2ff1605f3c87", "sighting_of_ref": "indicator--9239f3d3-c58d-44df-81cc-637b0197e9c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063549b0-c938-43ad-824d-c1c692288ed6", "sighting_of_ref": "indicator--bd968c73-2546-4114-b899-add76ea120af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdd4608-0dcf-4254-b6b8-0a8a675a2c17", "sighting_of_ref": "indicator--2be46f47-38fe-49bf-9dbf-62fdb71fa066", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4c2d90-8e94-4093-a684-0fa1ccc99ad0", "sighting_of_ref": "indicator--28a31fc2-9fdb-46ed-8c64-a3f2b58fcec8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1649cc90-bcac-4ef6-8cb8-64203990b9df", "sighting_of_ref": "indicator--4d9ec332-b0ca-429c-9c59-28be03109074", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bdadbb-7677-4b66-952f-3cf0f5efa486", "sighting_of_ref": "indicator--4f046de5-8a06-4c03-aff0-d7835107b0ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ecfeb7-6fd0-43f2-8d5d-56af83d9047e", "sighting_of_ref": "indicator--41d0459a-4096-4eee-baab-98fb4da55d08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc328c1-14bf-4298-84cc-f34c7031269e", "sighting_of_ref": "indicator--805bfaed-64f7-4e9f-8165-4e5d7b18574a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7252a680-e72f-435e-9ba6-3760b9df24cb", "sighting_of_ref": "indicator--b6f373dd-5005-480a-ac05-b97154fdbb3a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117ee035-00b8-4133-a876-25c700877f53", "sighting_of_ref": "indicator--3e17fb10-fdb3-41c4-b866-31f5905d6567", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d2aa86-0092-4f88-9c43-7934b95bb494", "sighting_of_ref": "indicator--dbbcd2ad-7bce-4aac-bacb-8bfb9702b1a1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa13d1d3-35eb-4dfa-9ce4-0ae0ae27fc19", "sighting_of_ref": "indicator--74674b1b-8835-4ce9-b8c2-63f1b0f36560", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70e4f46-6ff3-4ecd-819f-29b3966e539d", "sighting_of_ref": "indicator--e973c875-403a-4c3a-801f-230c8dd9c7c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1740c1-a831-4ad8-b306-100b004bf506", "sighting_of_ref": "indicator--ad9b3b02-212e-4cd0-9b0c-898b583fd2ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8657779-5a5c-4b0a-a680-14115a83424c", "sighting_of_ref": "indicator--a02541ac-513f-41ec-9615-affda065f130", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdfcb38-7cb5-4731-a926-24d21c30c4ff", "sighting_of_ref": "indicator--21c43e5a-291d-47ac-9a18-9b18d71b2da0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42d1661-6572-4831-9373-5f1ca60bc8d1", "sighting_of_ref": "indicator--ed52ffbf-6562-4f1b-9c78-a567cdfac080", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476567a6-c95a-411a-8f48-3a5e5956f755", "sighting_of_ref": "indicator--54337e44-679e-4077-8128-0f9bff679a53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbee423-2618-47d3-b836-f0c9909f4eff", "sighting_of_ref": "indicator--0d084d5d-8c83-4bb2-a954-2eb1811aec49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabebf21-fdd1-4991-9c8b-28bd396896b0", "sighting_of_ref": "indicator--ab592dba-44eb-4176-89a8-f68b3d18aaa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057954e8-cc11-4ff5-882f-5551c4777157", "sighting_of_ref": "indicator--6e246988-34d2-4559-88fb-33e4f78bc1eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269baf99-6b00-4d46-a1bd-754bd04509e8", "sighting_of_ref": "indicator--e4bcf3b0-d5a4-48b5-8276-c4b4fd49ffb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bc0c1e-f99d-4e25-b649-13255184020c", "sighting_of_ref": "indicator--d661d82b-1296-43db-b59b-fa8412bceffe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77203c2a-017b-4060-9438-b95bc40b59b6", "sighting_of_ref": "indicator--1a85e893-e422-44d7-b44f-e91ddd887450", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b4b663-c44f-46ac-866e-bb0446490c38", "sighting_of_ref": "indicator--2c4c65bc-d709-487b-a25e-9fea0d90d241", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79e0a26-3aa3-45a7-9a2c-9aed9d094a28", "sighting_of_ref": "indicator--50a15b2d-d2cf-49a7-935c-b8a8b92ade4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0e83b0-54c9-4454-9dca-e218216ada68", "sighting_of_ref": "indicator--c117a0d5-112a-4e60-a2ff-4e5dea5747c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95c16c6-049b-4917-8aa3-477dc681cb6a", "sighting_of_ref": "indicator--84939284-003d-4e98-9686-2ffafb5dbe38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e892fe0-75a6-4c58-9d92-0cd723384d7f", "sighting_of_ref": "indicator--25b2b21f-9992-46d8-87bc-92a4e4995a82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e224005-aa0f-46ea-8085-771dd31eec2e", "sighting_of_ref": "indicator--c33b6a4c-92a9-4e6d-89ef-6484f97ada6e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9080ad-0f1f-4c6c-83ef-d2f7fa31b428", "sighting_of_ref": "indicator--4a5a91a4-bf77-4061-925e-8e99f4ea0b18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f9c0b1-f167-413e-8fb4-d4030d4032ee", "sighting_of_ref": "indicator--5ab822f0-8429-4e3a-ad9b-432f08f2115b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5120755a-371d-4057-a180-f097c2a1a101", "sighting_of_ref": "indicator--7a17698d-f8be-4266-9f59-f64aba0bcc92", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd67d21-da4f-473d-a6bb-1cbd27a8573e", "sighting_of_ref": "indicator--5a4df467-5a6c-4df8-8eee-c17e50f89149", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c663a45d-9ea8-412a-bf62-ccaf00ab6640", "sighting_of_ref": "indicator--f33c383d-52ab-424b-a7ab-b65d7bd73afa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346c222d-c078-48e4-b354-2279c279bd4d", "sighting_of_ref": "indicator--5cc318fb-6bbb-43ca-b0b8-f8991b21ab14", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182a3c5c-a0db-471e-a7f0-91df0b567df3", "sighting_of_ref": "indicator--867be224-d72e-4495-bd63-b3e1bd8b0338", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0b2916-900a-408f-b392-640b91bb6587", "sighting_of_ref": "indicator--7a9c421b-7feb-4986-b4a4-f517669dd6be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3b33ff-4869-4bfa-88e7-a9b1b3805baf", "sighting_of_ref": "indicator--3717ef08-da12-4d5b-a46f-3bfd0a8b3ef1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0e98b3-9cc7-4351-bb0f-c02fe845545c", "sighting_of_ref": "indicator--37f5c5e6-9280-4b68-ba28-201f15d29b2d", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ef8c4c-ce72-470b-8b42-141bd92671d3", "sighting_of_ref": "indicator--90cdf3ae-5471-41ed-a804-3d2a37a67589", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beac782-f0a7-404c-a789-943d9e9e4fe8", "sighting_of_ref": "indicator--38a36094-08ae-4707-ac41-ff9c6d67c72c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a49688e-7ce0-4bf4-be62-9de1cecce20c", "sighting_of_ref": "indicator--f598fba3-b165-4aca-9992-426269867a14", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b73ad8-ffe8-4114-b352-a39516ed6fa6", "sighting_of_ref": "indicator--4886515f-a09a-4812-b005-c59ddc4c474e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cf66ee-d298-4f92-868a-84f62d1942ee", "sighting_of_ref": "indicator--27d2b7f5-16e5-4c27-8394-9b6b886a9262", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ac3f8-03a8-4a4f-af27-8167ca2b3109", "sighting_of_ref": "indicator--d9f41405-0c18-4192-b778-15c0de4a27b9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137af9da-aaa0-459a-a31a-73e66617e608", "sighting_of_ref": "indicator--14bba0b9-834c-46c5-a3e1-bff0d6b788f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d36e571-cbd9-42d0-9134-228170dd551a", "sighting_of_ref": "indicator--63a1745c-ba89-42c0-a68d-dd6fdf7639a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910b8008-d30e-42fc-b7fa-ce9ff9f4cccf", "sighting_of_ref": "indicator--107cc969-a195-464c-b1f5-c9a8c902e4f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae6d056-c6a8-49e7-938b-8b5952f9b102", "sighting_of_ref": "indicator--01ebe13a-7ddc-4004-b3b4-f5c6fc189474", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f9fb72-86a5-46da-b9a4-ee731bfa5b7b", "sighting_of_ref": "indicator--e57ba120-8dbd-422a-b18a-6e6a5d63e6fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0cc35c-ccde-433b-8a73-c0a320d03fb5", "sighting_of_ref": "indicator--02433635-cc52-4305-8394-3913b9f25524", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e278f9c2-9110-4802-a619-fcaf46c9a00f", "sighting_of_ref": "indicator--7a85f6e8-5a0f-4fb1-bea3-63fca1c754ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158c0703-ae1a-4b60-8256-00145bf80e99", "sighting_of_ref": "indicator--5c7bae2b-ff45-4528-8e7a-53d574f2d02a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73a0e4a-0179-47bb-847f-94c209a709f1", "sighting_of_ref": "indicator--9c0b20bd-6b53-41ab-a76b-77958509e5e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb06ee1f-9be1-4fd8-b159-8713cb6c35a3", "sighting_of_ref": "indicator--6617672d-610b-4611-bfc5-58485e95e9bf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94117188-82b5-44fd-b70e-2d67fb177fe1", "sighting_of_ref": "indicator--1740a653-56db-4c91-9eb5-75ca7ba2c64e", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01733fbf-9258-4e00-937f-bc784bbe3738", "sighting_of_ref": "indicator--a371ac95-7437-4b3f-879b-7f00bd5ac603", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f863927e-8424-46c0-b7e6-474d1e2a625d", "sighting_of_ref": "indicator--f3e6c5de-f83b-4067-b6fa-270ac910dabe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7c6a79-45a5-42fd-933b-37f267f46aa2", "sighting_of_ref": "indicator--2815f1a2-ca7e-4878-8b8d-f2bc82f7d08d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c880dd92-034b-4887-b9bf-6175b85d238b", "sighting_of_ref": "indicator--b25ec9be-2472-4aae-91c5-cd490ad413c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40be7570-32c3-45e9-8093-d91dea21adbf", "sighting_of_ref": "indicator--4a81d9ba-7991-4ce0-b9ab-d3466a471b3f", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98779395-aec2-41dd-b528-8265dc3a5522", "sighting_of_ref": "indicator--0a15b179-36f5-4b3f-9d5b-b502bab4176a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123499f0-9d3e-4b9c-93da-ed90c697354f", "sighting_of_ref": "indicator--5c20d96f-2f4f-42c0-a38d-6a750ea228cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cf71d1-4a79-4517-a5ef-4deb2c99a489", "sighting_of_ref": "indicator--77f2ac17-09c3-48f7-8378-3d28b8229a63", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e36cbc-79bd-4371-9636-114a5d3b0f04", "sighting_of_ref": "indicator--24e2d794-7401-4d30-9135-1dadd0ae85dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cca3b2-5b09-4099-a9a7-9c7c517aef92", "sighting_of_ref": "indicator--5f563252-5d5c-4529-b89f-da0b483d73c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab55f15-3084-4cc9-9629-6e72eb506b72", "sighting_of_ref": "indicator--8e93f79a-a6d1-4eff-a457-9a12bbf411dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c0745a-a20f-42ae-8fb5-8cf5174dadea", "sighting_of_ref": "indicator--df86c4a7-5667-45b8-a328-c679d8f90df9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f7193c-f291-4a79-9648-b16d6488bccb", "sighting_of_ref": "indicator--147164f7-37d6-41e5-9185-1c714978fc1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670df150-ea6d-4dcf-affe-50807df2b9df", "sighting_of_ref": "indicator--0fc53be7-79e8-41aa-9233-92ca1d22ab76", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1bca06-3d92-4f83-bf09-237d5d4b91af", "sighting_of_ref": "indicator--733b641e-59c7-4f74-9f1c-801c7d2eb2f4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4033ff9-99d9-4f82-beb0-19a6d08079ec", "sighting_of_ref": "indicator--0a03cb44-dea3-498f-b781-9772de5fbf93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361c11f7-87ad-4c95-a816-44d7e8c6c057", "sighting_of_ref": "indicator--25e4da13-9a0b-4b50-be3d-f8f252d1b767", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51025b83-08a2-4505-b762-65f889cc19c1", "sighting_of_ref": "indicator--74e07305-d6c6-410a-94c0-05588ba5def2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a3d240-e628-4f42-bf2e-9808d72c7f48", "sighting_of_ref": "indicator--78186b2d-43d4-4885-a8dc-1db43653a525", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb80b2-8d46-404d-970d-8c01ddd26547", "sighting_of_ref": "indicator--c8cf5e36-adfc-4e2c-9295-f9916c6644f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3008e9a-b17f-49a9-96e5-71a4c1e6dc8c", "sighting_of_ref": "indicator--5275640f-30bd-41c7-bbcb-25689bbaa51f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac3a223-38bb-4048-a0fd-fbeb9c63673e", "sighting_of_ref": "indicator--bddb06d4-0f7a-45bf-82f8-fe51faa00c06", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eff9cbf-8146-45d9-90a7-2af090b35f79", "sighting_of_ref": "indicator--a8964228-b768-41ac-aadc-819343d42297", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561a946f-5f31-4b4d-b455-9cd26d6bde7f", "sighting_of_ref": "indicator--bab79374-9838-4e78-ab3a-1349d10c905a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc15b3b-e36a-4859-a239-6acb29174b2b", "sighting_of_ref": "indicator--1e1fdf8f-d371-4e41-b075-7c130bdec88c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ee3d82-89cb-4a31-b31b-aabc4a8d53e5", "sighting_of_ref": "indicator--fd6b2df8-86d7-46d0-ad94-96de563ada35", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cab3c9-6275-4c0b-9526-0d6f4b2c06ff", "sighting_of_ref": "indicator--af9465ef-650b-4f8c-af9b-6b6fc412473f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602d0fe1-ad51-4141-9867-e541c0df980e", "sighting_of_ref": "indicator--2a5bb936-875a-48f2-b013-f5cec795bb7f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f897b644-3f32-47f6-834d-79ef2184a5d7", "sighting_of_ref": "indicator--ffb92bb0-8a2d-40c0-9b3d-7a7aae74fc5e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8303f5de-a4a2-4b3e-978c-4d86295bfde3", "sighting_of_ref": "indicator--c4cc1a40-ac49-4e0e-bb73-fd943110e44e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7233d9-edfa-4efe-9fcc-b8ab4efe7897", "sighting_of_ref": "indicator--8822806e-e841-4c63-b46f-a51f5ebcfecc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1dcb0a-af36-499f-90ea-ca34e3cffe37", "sighting_of_ref": "indicator--53f35aa7-fa62-4d09-b691-95ebaaa044e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7ac9b8-e56e-4fcb-a96c-deb1f13fb3c7", "sighting_of_ref": "indicator--1387b657-389c-4039-9119-6bcb86c5242a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bed18f-9089-4ed1-8e73-938061a43df4", "sighting_of_ref": "indicator--513be0c5-7466-439b-924d-5c4d1eef2fcc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1fc559-f91b-42ce-a1e5-7c67b69fd2a9", "sighting_of_ref": "indicator--23a3ac6d-53e3-4737-b5cf-a24e2f63027b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069fc509-2e35-4439-86a2-ff4f9583b853", "sighting_of_ref": "indicator--5adf5a51-041a-47c3-b14b-7562cd6c94fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05ff7d5-40af-4fc2-b8d2-3f7ed006ee51", "sighting_of_ref": "indicator--1785e03d-e796-4ae0-882a-8aed5ade8208", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5622857c-8b3b-4b01-91bf-3009072b1e6e", "sighting_of_ref": "indicator--e136c475-2506-4935-af7d-2f4c08ceec64", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6d4951-e6d6-418b-bf91-7b7515c45b30", "sighting_of_ref": "indicator--3310b063-d14b-4a3c-b2f4-a38ea28d9674", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7e0b88-9446-4a6e-b8e4-eb233cb4e477", "sighting_of_ref": "indicator--5dfbe2d7-bb47-474f-a809-6acd6ed12d9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f84e60c-f564-45d9-b1de-077acc893d5e", "sighting_of_ref": "indicator--0aa199d5-a8a0-4e50-ad42-891d9841a95f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a84cb0-8a24-48d8-91b1-b8e667ddbaa1", "sighting_of_ref": "indicator--60ca63c7-07d4-43dc-b4b2-9c9796c8cbc4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baf6da7-13b8-4033-9521-f8e41204987d", "sighting_of_ref": "indicator--9b7c2e7a-1607-40d6-8d17-f4ceffab91aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9198ef-3026-4229-bec4-96dc8fecff79", "sighting_of_ref": "indicator--b0a14f88-1883-4754-9a4b-d3d406c579a8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69668c8e-3e41-40c5-941e-f7e548946262", "sighting_of_ref": "indicator--32aa696a-a64a-4eec-b9ec-b3a95a086745", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a6ba1c-347b-4591-a10b-288e1e4f4afc", "sighting_of_ref": "indicator--cc85457e-a379-42cf-ae40-9d673c6f36b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5314861-3411-4d9a-9085-5725f2d13e2e", "sighting_of_ref": "indicator--4f807c87-9a46-4419-9e8e-aa37a842d36a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4c8f85-ef45-487b-a858-ba1e9637b1ad", "sighting_of_ref": "indicator--4b61a196-cfee-4e55-96df-3a85d5a44486", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e27e3c3-2d3c-466c-9701-e0e21c3d4663", "sighting_of_ref": "indicator--4878d45e-0666-40a9-a90a-35238dab2f2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c319dd2-7c38-4c75-9447-fbb3077706a8", "sighting_of_ref": "indicator--e36ad403-dba8-4fcb-98e6-585a720c72fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af231a82-4170-43ab-b59c-4a0f808cbacd", "sighting_of_ref": "indicator--b84cfe0b-8a4f-4743-96b1-84764ae2588f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449094a0-3617-4f4d-b450-a2f3d3cd533b", "sighting_of_ref": "indicator--5494ae8f-da7d-4335-8d65-32014414de4b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c2c370-a33e-478c-9b5b-885f01c33546", "sighting_of_ref": "indicator--8b25f360-557e-43bd-87fa-bb0dfccc540b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97df7c12-f409-4bd1-9506-b05729d27372", "sighting_of_ref": "indicator--c05700a2-632d-41ea-98bd-6b77d6277bff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1404008c-89f5-4743-b1c9-84bf69f1e40f", "sighting_of_ref": "indicator--df04ef4c-40fd-4473-89e0-3d916b5a7241", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdc493c-8500-4693-99e0-af8d7ed079f1", "sighting_of_ref": "indicator--9b68eb9e-0fb5-4c18-b5b9-7697121e251f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e9bb0-a130-46ce-b535-aa0dea27bfde", "sighting_of_ref": "indicator--ddd4d938-6171-401e-a25d-b59bfd75de8f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d20e190-5a53-4f43-906b-95d6e6d4dd96", "sighting_of_ref": "indicator--008f9692-a9de-40af-9c31-40a9c8a49ff2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52c6a5f-47b2-4207-b130-acc0fa4de6cc", "sighting_of_ref": "indicator--793d3aa1-936f-4cda-a84f-e9a660433d1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a018989d-c8fe-464f-8e88-e85b18200fff", "sighting_of_ref": "indicator--acff1161-5977-4ccc-9c11-19912718d4c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19016688-a367-4ccd-bd48-2a9c7608407a", "sighting_of_ref": "indicator--316952bd-8fb5-4890-83d6-5d569ad125c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcc20cb-6d39-4b2a-b75a-f5bd669c1545", "sighting_of_ref": "indicator--1ef05f1a-5f1d-414d-904f-aa796fa2f12e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c59e44-16f1-4652-b907-0c31b9ce1034", "sighting_of_ref": "indicator--983b08c1-64bf-4e14-a038-ae9cfe7ec960", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461db5fd-5d4f-4eeb-ab5b-c72f584b0d17", "sighting_of_ref": "indicator--6b253504-5159-4f99-bc49-aeffa158ddbf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90758a1-06bc-4cf5-b5e0-1812dd3a21bf", "sighting_of_ref": "indicator--746ca36b-c30b-48a9-bbdd-d0962210364c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce72a96a-0017-4f52-a02b-0526ea814a55", "sighting_of_ref": "indicator--e72ef1b1-1ee0-4e7f-beed-895803a00e9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8821d85-2985-4e1f-9af5-cec4460f8e96", "sighting_of_ref": "indicator--86be990a-bc87-4a43-b41c-72abe4f2a97d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47548422-7e59-4059-943f-9947e3d55907", "sighting_of_ref": "indicator--b0c1220d-593d-45e5-8ba7-14e2724b802e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d838d7a1-c9ec-450a-9883-0c572e76aa0e", "sighting_of_ref": "indicator--e36fd359-ceda-4581-b6ba-b8b3189d1f71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d2951a-95e2-4ddf-b48c-c61ddab908cf", "sighting_of_ref": "indicator--7977e265-c9bf-4c27-8c72-7b4d2328daf8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503b44fe-ca49-4fb3-b8e0-6a3fe0203fbc", "sighting_of_ref": "indicator--9c2225f1-87a6-45d0-b176-dc00bcac2b91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e97c0c0-0d9b-4f86-ba53-fde7cbaa0829", "sighting_of_ref": "indicator--9307f28f-7001-4b5f-8d85-d054beebd055", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fb2ffe-ac27-461a-a337-e5c71337dfa3", "sighting_of_ref": "indicator--cc74b487-fe64-4dc6-87d8-1dec17f583d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d451f87e-e5b3-4c9f-ad22-6f01443f5835", "sighting_of_ref": "indicator--19829ce1-c84b-43f6-a2e4-63a00251d865", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9258428a-c8d4-4b0f-9049-1188fc400e5a", "sighting_of_ref": "indicator--30bf4a4f-3d28-4eb8-b7e2-6c29660fe961", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ec6163-b7a9-4bb7-9c92-492dc61b001f", "sighting_of_ref": "indicator--98aabe10-e32c-4fd2-bda4-fdfd11aac4dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf804f6-8336-4034-9b2d-d5b457bb6961", "sighting_of_ref": "indicator--5f1a06f0-3de1-4aeb-8af9-0b896f4f82c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b546dfad-dbe5-4642-866f-efde3dfc4865", "sighting_of_ref": "indicator--66ddc51a-9cb0-48de-8f82-738633cc1dec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34c41cd-28d5-42dc-a07b-195759c2eb7b", "sighting_of_ref": "indicator--1ef4b234-d924-4bca-bed8-43fd7c957489", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e831b9a8-9e4e-4414-8091-981a8960b183", "sighting_of_ref": "indicator--94f846fb-77f2-4922-a6cf-65c249f37f84", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62052456-0961-412e-8087-701d6f7bce0b", "sighting_of_ref": "indicator--24465a45-381f-4c56-ad25-e63df753b25e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc549e-1d69-47e1-9c5a-18b4d42577ef", "sighting_of_ref": "indicator--16f38886-6550-48e1-995d-6132acf46a70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a4d872-2ab6-44b6-8d91-330e70873184", "sighting_of_ref": "indicator--e8c39f8b-2838-459a-ae5f-2b9abcb5604d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64981195-a8f2-42c2-8bf5-1e5c4c908f11", "sighting_of_ref": "indicator--a3ad9be6-74a3-4c0e-b407-de149ee3b7e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e05658-d8f5-4691-be24-cf2391db30c2", "sighting_of_ref": "indicator--152f93d6-f540-40a9-b7a2-51abf1bf4733", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26270564-6b96-4f82-b36a-ec4f16f2ac4b", "sighting_of_ref": "indicator--89cf814d-79a1-448f-8cd3-69594d4968c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e531184-79ce-4688-ae0f-51383665d98e", "sighting_of_ref": "indicator--7c535b49-db59-44eb-9914-2f566569102d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbebd03c-1d12-4e17-81d0-a1fb274d4031", "sighting_of_ref": "indicator--0507c118-a33f-401e-af31-28d7da5d808d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f1e647-91c9-49d1-9ee3-4e351d1bf327", "sighting_of_ref": "indicator--93588859-12b3-4ffd-8dea-c838af3449df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db47827-c396-4875-b0ea-1f833f2faa38", "sighting_of_ref": "indicator--73321fe2-bc8a-47a7-8782-da09dedabef9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd10e63b-1b8e-4c9d-86ba-a8f9ca773cf6", "sighting_of_ref": "indicator--ea4455e1-e85a-4657-a92a-2b3dd94a2f27", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288595e1-f380-4c03-96e7-fd0fc7ed99a2", "sighting_of_ref": "indicator--ea4455e1-e85a-4657-a92a-2b3dd94a2f27", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e61934-8da7-417a-aa0d-54aa91f1197a", "sighting_of_ref": "indicator--8ef25146-54f2-4ed6-b0d7-0a99142a11c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8002d8e-af70-46e4-9186-461db9a7ee55", "sighting_of_ref": "indicator--b097b9f5-98f8-4d26-95d6-d77f28cce38f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348f48fb-120a-4358-8123-e197435f818e", "sighting_of_ref": "indicator--a61e0cf4-9037-47f9-a4dc-901c03a4ee12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d3359f-ce27-4d82-95c1-4c19d8a96ffa", "sighting_of_ref": "indicator--1f4a0032-e663-4061-be6c-afe6dc0fd1c8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afddfcb-f20f-4a49-9110-e0cbb9c39ec7", "sighting_of_ref": "indicator--8dd4252d-1a3f-461b-8cca-9ddf9d53f8ef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f004d42-0337-4e8c-abb5-d9193464a2d8", "sighting_of_ref": "indicator--45cc8e6c-b457-45f8-ab82-164985bc9e45", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab973aba-b0dd-4076-beef-af68dba4e1c0", "sighting_of_ref": "indicator--3b638df1-76d2-491b-a2e1-67702b8ee46e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9f140d-cce7-4973-a060-47cc05cacef0", "sighting_of_ref": "indicator--adaa213e-ed0a-4252-b103-6be9b5e72844", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ef7a46-47ef-4393-89c9-f366920d6776", "sighting_of_ref": "indicator--10f425ae-ea79-4908-8c59-1f47df6a889d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136de8e5-da06-49cc-8f8c-dc15952394f4", "sighting_of_ref": "indicator--05a4d27b-d947-4650-bd57-c8d684fdc9e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e20802-4ddd-43f2-bb41-6774d2256a88", "sighting_of_ref": "indicator--a77a5086-628c-4a24-9c2e-a3ec35309775", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d458ba9-3325-4c60-a8d2-bef0e4c42d70", "sighting_of_ref": "indicator--a7b4325d-944c-41f9-a729-446277d0294d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ce0af2-3f6e-499c-ae11-402fc6d6518b", "sighting_of_ref": "indicator--7621c9e1-9f19-4109-bb44-dbe6db16ddbb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584bde92-fc1e-42ba-be91-1cfb526f0424", "sighting_of_ref": "indicator--9d0841f7-7e36-4390-b7ed-39ff3e0a28d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46f257e-2fe9-4b28-b4a2-f10d4d856bb7", "sighting_of_ref": "indicator--df2cf3e8-6ff2-44be-b950-b2cf3f1a4c03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc141335-e081-4fae-bc0f-7068895ebff7", "sighting_of_ref": "indicator--4cb88d64-5dc8-4fd2-8f50-6e86206f57a1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fb1d75-e02a-4ab9-b0c2-7e5024c77e84", "sighting_of_ref": "indicator--6a886a9e-0eff-4191-b093-adca1cb25813", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da5b5ad-10ec-451b-9d6f-bc7edc348775", "sighting_of_ref": "indicator--bfff53a1-772e-46e2-a664-3f88df85d5bc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a56873c-3979-484b-bb01-a9040e6bc017", "sighting_of_ref": "indicator--e65a5a51-51a5-4a8f-83d1-4b01617b9992", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56b1afd-dad5-47f4-a5c4-a172e4c6b038", "sighting_of_ref": "indicator--a3670399-a8ba-420b-8897-2e005f82a1e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1751c4d1-e578-44a5-b838-2544f496df99", "sighting_of_ref": "indicator--38bdcfd9-d3ee-4c6a-8ceb-9a97e3062743", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24963d83-7fbb-410c-a24d-82738891dc38", "sighting_of_ref": "indicator--a03be6ee-063b-4872-b8af-fab34f5e3bed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b300d1b8-8cf1-4e96-b5ae-6c34347a0260", "sighting_of_ref": "indicator--1117356d-4e80-4d73-89d8-27d63421cb0c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d098384-3050-4924-a741-d51b7f3a022a", "sighting_of_ref": "indicator--4adf2cc5-8d4e-4dfd-81bf-ff14aa19e0ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fabe52-38e4-4db2-83ea-4ae3d65e5e5b", "sighting_of_ref": "indicator--cc98093a-78f9-4570-8f2e-a4598f28c001", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6910ac-5f85-4b53-affd-b73304d4acd6", "sighting_of_ref": "indicator--39ebbb2b-9936-4a13-910d-45b3de4ebbd2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e299636a-c5a3-4bd5-98a4-3d9d879b88d9", "sighting_of_ref": "indicator--f9e2d0eb-b9a7-4665-ab97-088957ed92ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8eebb5-a3a3-4d76-aa0e-3932c1cb8325", "sighting_of_ref": "indicator--96514f66-deff-44a2-ae1f-7bb7f403a427", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89dc7eaf-b2c6-45d1-997a-866e420c6199", "sighting_of_ref": "indicator--c918d7ff-f615-409d-a97a-c6e9c1f75c54", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6b88a4-1be5-4b7c-882d-568ca7a36e9c", "sighting_of_ref": "indicator--ddfd3dfb-cf32-4824-a415-f3fcef2cb016", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e035ed-fbe8-46b2-8b69-b95ecc272059", "sighting_of_ref": "indicator--f853be05-45f1-4043-9262-2517bd9228eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae2cc71-623c-4142-a3f8-40e26be7a30e", "sighting_of_ref": "indicator--ab853a45-aa29-4b49-b37b-4ed2756447d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be1292f-45de-41b1-9565-06f20d368239", "sighting_of_ref": "indicator--39707a56-c23c-497f-9ae0-e80beea5efba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5550798d-4eaa-464b-ae53-522855592226", "sighting_of_ref": "indicator--97f4d36d-228e-4f51-b22b-f2d87772dcd1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffca3ef-6839-4362-9e43-73fbd6747105", "sighting_of_ref": "indicator--f861da58-4c97-481c-b567-308156765863", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf34f3b-462d-46da-9ba6-2ebba659ae57", "sighting_of_ref": "indicator--f55908b1-0c7d-4bd1-b697-461369f13ab9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fa6658-62c5-4375-983a-36c0b8fca852", "sighting_of_ref": "indicator--a8c96fa0-d17a-4472-9fc6-af6278b93d91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593d60ae-5bb8-420a-826b-fdd96b2beb62", "sighting_of_ref": "indicator--16d0d9f3-15e4-40e7-9807-54a9b244cc54", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b54921e-f92c-4b95-a2dd-9e532edaaca7", "sighting_of_ref": "indicator--797567a4-f924-4a85-b57a-84a9d7c39525", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce6363c-3e2e-4083-ae92-b65d352dc6c4", "sighting_of_ref": "indicator--656aa375-a5f8-451d-81c1-f57cbcc4eacd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be24ce9-b79b-4c6d-b525-799206e72c3e", "sighting_of_ref": "indicator--ef44f81a-4d0d-4477-baa2-49770f864a4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6609a2-32f1-4159-abfc-5970256e7327", "sighting_of_ref": "indicator--a8a44304-9d64-4cc1-b5bf-5dc4c6ba60fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e9ec36-7caa-4871-bb27-d21e11ecef38", "sighting_of_ref": "indicator--ff36e2d9-9411-4d73-86e5-059f5872328b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4514e06-e47e-4fec-bf9d-e201ebc731e9", "sighting_of_ref": "indicator--7439676f-fc87-4044-a441-cd4cc42d0751", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d49982-5522-4438-bbd8-81615364971c", "sighting_of_ref": "indicator--a5fd4d74-4673-47de-8875-5f2fcabf5166", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e73476-473e-4451-84aa-ec6f892be5a5", "sighting_of_ref": "indicator--a1b5c86c-6f94-41e2-8a69-cc5862e0b017", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32dd2f2e-8aa4-4b26-9873-70fc43cd74d3", "sighting_of_ref": "indicator--f8c57f29-020f-430d-b379-e01077c5ee99", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a301c38-d7e2-4b61-871f-d1effb3c4c8d", "sighting_of_ref": "indicator--478674ba-cce3-4349-bd2a-625d9056480b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29ea3cd-ba54-43aa-9f02-a26bf7d00031", "sighting_of_ref": "indicator--229b4083-6e75-45c7-a653-a75960b98389", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ae8616-2583-4e8d-8b62-08c6ebc8c32d", "sighting_of_ref": "indicator--29922bee-5e54-4f68-939a-660f94fe1d2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef66610-17d3-432a-9b78-60aa8a95ce31", "sighting_of_ref": "indicator--23d19963-55b4-4059-8acb-d0e53bf99fb3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03113fc8-2882-4cc7-b44d-85546b272550", "sighting_of_ref": "indicator--df0a3e4d-0ece-4ffd-92a9-3b97252acbdc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0ef3aa-0ccc-4919-b9a1-8042d9c3b554", "sighting_of_ref": "indicator--884cdb74-b783-405f-b7cb-ec4b4f6885b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f110504-ebaf-44af-9ed3-8e76937e67bf", "sighting_of_ref": "indicator--64e51ea1-5426-4e45-9029-9713c2bdca72", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f6e456-b995-4a85-a172-7beb7782442d", "sighting_of_ref": "indicator--dea0cef8-9b13-4419-9c03-522dfa19b31d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53636c24-f299-4170-a995-b7a13deee4c4", "sighting_of_ref": "indicator--c2f61411-7c7a-4374-9cfd-743d4996315f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f8505c-6da8-4582-8a38-1b089f8bcc91", "sighting_of_ref": "indicator--06acd2f5-0324-48f8-8463-8ff7aa9ed01f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b659c7-60cd-4017-92d7-1a4c47274d63", "sighting_of_ref": "indicator--bc9dfb9b-2d76-4e83-a1d6-4c6f3e9ef258", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1fcd4a-9fbd-4e13-8cb2-d6ea69bbb8a6", "sighting_of_ref": "indicator--8389a010-813b-4045-9048-ec9a1be438b5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9271e561-9dea-4d50-8ccf-41b62f21b266", "sighting_of_ref": "indicator--c69612d6-fa7a-471a-8426-395790d31abe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b48b705-5e12-4374-bc86-cde2ac47f57c", "sighting_of_ref": "indicator--e43e676b-b9ef-4941-a3fe-3fc1a302a9ce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900049fc-38f2-4bae-b316-eaeab250c379", "sighting_of_ref": "indicator--6b0024c8-726d-4f9d-9611-3a7cc196a520", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316a3bde-78d3-409c-96ad-4013b3a22195", "sighting_of_ref": "indicator--8d404aa8-886e-452c-9b52-c40a0d44307e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4937f371-1aa8-41c3-8b80-0637933f03fd", "sighting_of_ref": "indicator--088725c9-971e-4a0f-b003-2a6caf4833c2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3981599d-49f4-4e98-85ea-2d3001f90c1f", "sighting_of_ref": "indicator--1dbcf72b-56f8-490d-9fb5-8d0d32ac2e96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6940f2b1-b25d-4333-a0dc-9e2f12e5877d", "sighting_of_ref": "indicator--3de77819-fab1-4348-adbb-78a26f1925a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8a9d56-cac4-4e79-a3d9-865dcb1a316c", "sighting_of_ref": "indicator--e1e3b185-4e62-476b-b6f2-343a5d4b2459", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe7ef4b-5604-4ff4-834e-d4d327968bb2", "sighting_of_ref": "indicator--753fe983-a61d-4637-ae34-0f07b9d167cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cc284b-26d9-480b-91cd-b57d74f4b2b2", "sighting_of_ref": "indicator--0c5673d2-1684-4fe3-9053-604f9b210c9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c73cd1b-2cc0-4c2d-93f3-79581f6671c9", "sighting_of_ref": "indicator--3150b326-79b1-4511-a0ac-b80984988b33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aaf2058-f768-4d4b-b81b-a60c5993335d", "sighting_of_ref": "indicator--32baba35-b503-4afd-ac8f-7cfc8ad891da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b800a9-a9e9-4d41-98a2-88d173cef105", "sighting_of_ref": "indicator--ef8e4bf9-1fb6-474c-832c-ca0b26271cf1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0584e5aa-e2ae-4786-805d-844ca7426106", "sighting_of_ref": "indicator--e7286042-a720-4c4c-bba1-5c7e709631fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55bcd97-3a1d-46c2-90cd-2e360ab47423", "sighting_of_ref": "indicator--dd165f28-9157-4bd8-8ca0-24ee66882640", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5507c348-557d-4240-85f1-d7da48ed537c", "sighting_of_ref": "indicator--f40d65f9-bca3-448c-b2cf-2ae587aac519", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfd186a-2af3-4120-8542-0ef8691b86a2", "sighting_of_ref": "indicator--593d4083-72ad-42aa-b3e6-b1b7d3ca5324", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3f1f32-6e4a-46a8-9caf-af26feeb4fb7", "sighting_of_ref": "indicator--f12580ac-ea43-4135-b3f3-e0059d25d9ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c020afe-a7ff-440c-bc6b-9d8001d669b2", "sighting_of_ref": "indicator--1474c85f-ee87-4de4-b4e0-282386af7e20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e678a4b-9466-46c7-878b-8f4ffd272a91", "sighting_of_ref": "indicator--cc7ab0f6-dd44-43f2-bded-41f96308bb2b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6c1707-2032-49f3-8214-d5d100b0e1fa", "sighting_of_ref": "indicator--54820b98-edf6-425b-9138-e53f91bddfd0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e596eb-515c-4fdd-aea8-d807ef340911", "sighting_of_ref": "indicator--54cb9d47-ed62-4705-a9b7-3744b9e4accc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f294d67b-5323-4f9f-b4b0-0eedf3e46030", "sighting_of_ref": "indicator--fc681d11-f664-4425-9a0e-bc4ae48119c7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9295230a-04ce-47dd-a45f-312c7c24c436", "sighting_of_ref": "indicator--53e55942-cf54-4b49-a7b8-0439551fa5cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe3e882-d9ab-4c12-b4d1-3832a66c7c1b", "sighting_of_ref": "indicator--56dc27f4-4748-4582-b7a8-ec559d3a0a4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1a04de-0912-4264-93fd-0f2fe8a6ffee", "sighting_of_ref": "indicator--fab13c79-6fe7-480f-a413-f8cb80958b67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2f9aeb-bbc0-48ae-a9b2-a1e43fd6799e", "sighting_of_ref": "indicator--58c6baf1-d74c-4c9f-a78c-9c035d753165", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8286ac91-0c23-4762-8529-4eb0e684cebc", "sighting_of_ref": "indicator--c01ec01e-1d46-4054-a030-dcef3ccf9482", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baff48ef-2efe-487f-9435-5aa728928acb", "sighting_of_ref": "indicator--74308513-c414-4cfd-b770-051678c3974b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e895b7-c3cc-4099-819e-8292ddfd0453", "sighting_of_ref": "indicator--65e769b1-4eaf-48d3-a81b-fd39baaa5d0f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f73e229-3363-4259-aba4-8a90537344ad", "sighting_of_ref": "indicator--e4f5b6bb-e3c7-4877-9819-6769bc709e7e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426d755c-f1f1-40cf-96df-9f4a0e410d26", "sighting_of_ref": "indicator--e65e520f-c296-4848-9ebe-542bf28d528f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc67827a-9ae1-4d29-b941-aa8db72aa25d", "sighting_of_ref": "indicator--3053f409-2b66-4c7d-b3dd-4a80c7e86d5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915dd6b6-0e84-4be0-9962-411f1ed9d5fd", "sighting_of_ref": "indicator--ef60eb57-18ae-4b25-ab69-d4de477c5a90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bffbfe-83e9-4caa-aab2-41d2b9ea447b", "sighting_of_ref": "indicator--aa0e79c6-db23-4e04-b968-52cfb6fd328d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb1ba60-3cf2-480c-adad-7a758829fd74", "sighting_of_ref": "indicator--f215340c-4d03-4136-8a79-4a725ee5e2a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b7b808-e062-40c2-9bde-5d8f88f1e360", "sighting_of_ref": "indicator--c0787fe3-b31d-401b-9652-27ec56d1da8a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e529e969-15bc-4f1a-aec5-999d2f7c207e", "sighting_of_ref": "indicator--79e8af3c-d5b2-4a61-a4b7-88e3807f18db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e472b9e-1ff4-45a6-aae0-b23bdef9af5d", "sighting_of_ref": "indicator--d222ce14-096e-4a67-b53e-bf14c4b91497", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43684d5a-593e-4359-8978-ff36eb77b92d", "sighting_of_ref": "indicator--69e3c0c9-41bb-4b15-9cd9-fbc1f65fdb5f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d215444-8908-4301-b28e-0313266a59f0", "sighting_of_ref": "indicator--3a86eafb-34f8-4aa1-af18-ad7d639cbb1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3475255b-6d80-4aeb-90d3-b16deba177df", "sighting_of_ref": "indicator--48193bb3-20c1-4e3f-b96c-524cb3fffbf1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dede955e-3c9f-48ed-9eda-03e546415c37", "sighting_of_ref": "indicator--218f8d95-64d2-4b4a-b0ad-918fa139f7df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f213fae-05ab-4efb-add5-2274e8bfee9f", "sighting_of_ref": "indicator--acc99542-38e6-41ec-a9fc-bb269c39f32b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87056383-ba68-423e-87d8-738074aa59b5", "sighting_of_ref": "indicator--64f11e1b-05af-4f67-a89b-37c3fb9484bf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebecfbc-1ebf-4f67-9deb-7905ad11078c", "sighting_of_ref": "indicator--90621c79-f7dc-40d0-992a-1b2d70a05fdc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1832614f-5ff1-49ac-a523-975b143588c8", "sighting_of_ref": "indicator--69ae53dd-f81d-47dd-85da-5e0d4021a0d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a26220-cd15-4f79-8504-d497cee796e2", "sighting_of_ref": "indicator--c7789fa3-5caf-40d7-94df-e85a7ad0501d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fde72c-d309-45c3-983b-17090d4dc146", "sighting_of_ref": "indicator--9c42f266-ba9d-4f1e-965c-6fb8d51352af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638da526-6f1f-4124-943f-9b4a1ca29484", "sighting_of_ref": "indicator--6722eaa8-e465-405a-bd0f-c575483c572c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ddeea6-cff4-4b98-a03d-85d0ac6677d2", "sighting_of_ref": "indicator--58104bf4-961a-4374-af47-ac1de6f7c8ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611d5a83-9c08-4944-b871-1ea6aa7be477", "sighting_of_ref": "indicator--450b490a-427e-4100-8bd3-de6c82e020cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ddfa24-bc5a-4abf-8fc0-40c1bea14209", "sighting_of_ref": "indicator--d73e76b3-0dee-43e5-82f9-52a0cfa2d35c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad8fe49-4404-4e7a-be85-71917a3e2496", "sighting_of_ref": "indicator--772022bf-e4cd-498f-a9c0-29d78c003a76", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b694e6-0369-48f0-886a-7dea9e84f8c6", "sighting_of_ref": "indicator--32345450-dd70-4ec6-8656-8a2368ef1862", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb10e849-80be-407d-b76c-4fed97249b2e", "sighting_of_ref": "indicator--e870d5dc-f833-49e7-881a-7d7c002fdc0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45a05b8-292e-43af-b554-c6b50314f0d4", "sighting_of_ref": "indicator--6b548a4d-26ed-4b0a-bdc3-cec34eb29371", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3571faa9-9f33-488b-859c-5523f0128a2a", "sighting_of_ref": "indicator--1a4d8f0e-48a3-47bb-8aea-51f3f1ab9d02", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dbd328-4573-4afd-a8cc-16cbee8abdad", "sighting_of_ref": "indicator--b621284f-21de-49ed-99c5-6755ad6f5415", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de49e631-ac3e-444d-85dd-0883b0af6bb0", "sighting_of_ref": "indicator--86898d89-97b1-4def-a9d0-cd6859517663", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e91f1ad-e8fc-488e-b248-712d53785b35", "sighting_of_ref": "indicator--a8222bdf-2588-4739-b497-65039de5be48", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1e5907-f923-4a7a-bf8e-62fc13363ba7", "sighting_of_ref": "indicator--b0a27804-073b-4752-8a2e-f114d336991b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b7b79b-173a-4a73-baf6-1cf7df8db507", "sighting_of_ref": "indicator--6627dad1-d226-4c47-9c1c-7f0c10071c85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d14212-5bca-4b5c-87f5-93f94f9d503b", "sighting_of_ref": "indicator--10036f51-e475-42de-b0e1-716f980b653a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8577b45f-ea2f-4d4c-8c36-c20e6436b2c6", "sighting_of_ref": "indicator--1356a260-b48b-4e05-aff3-29aa0ffcd053", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0c70f9-4750-4b21-ba25-c7a0d9e03566", "sighting_of_ref": "indicator--d324ad65-d0d5-4b1a-9482-53acf0de4e60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a36c77f-7034-44ae-b73c-a9963e33ef0d", "sighting_of_ref": "indicator--e0b5a36f-cc68-491e-8557-c0e9291dd46b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d687351e-b879-4484-839c-e9ec138aac6b", "sighting_of_ref": "indicator--988af30e-a7d1-4219-9fd9-4ae6d3c9940d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ce5624-d027-44e0-a7f6-533a16e64c4a", "sighting_of_ref": "indicator--4929734c-2907-4dd3-a886-00705b913641", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6259c4c-658b-4db3-a1cb-c5fdd3396c74", "sighting_of_ref": "indicator--bf824e52-a266-48b1-bad1-cc54d70bbd0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8111f3-dfd7-4bd2-997c-da8bbe060b82", "sighting_of_ref": "indicator--fa45a133-5776-4e94-be7b-902bd27b81e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b667cb2b-c9fe-4523-813b-f2d2460d4c36", "sighting_of_ref": "indicator--ea0eeaba-f1a0-44ce-b074-aa4daaa14d9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedb45c9-aff4-4ea7-8590-bb0187860d9a", "sighting_of_ref": "indicator--92b8b19f-62cb-44aa-aa4b-843176276072", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1401f2c9-5f93-4b11-81fe-32308e4f0e49", "sighting_of_ref": "indicator--71e8ba90-21ac-40d4-b2d3-d12078423f34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a843146f-dfb9-4750-94f8-a319cf8a820e", "sighting_of_ref": "indicator--0def32db-35fc-48c4-ad21-73711241835e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73470ab2-7dc8-4758-9de0-40d6ab7f2e4a", "sighting_of_ref": "indicator--6de77fe1-f389-4be5-af19-4fbcb2d39c46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4dea22-0e92-4b93-b2f3-23af365b5ca0", "sighting_of_ref": "indicator--26f2490f-8196-4593-ab32-4e4ae11007a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2377bac-b07a-43b3-b785-cc9b98ee24cf", "sighting_of_ref": "indicator--c63a2dea-a06b-4a79-b391-0e733fede615", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c70288d-fe6f-4fe1-a09b-35c3558afae6", "sighting_of_ref": "indicator--4ddc8d0d-7962-4850-bf55-df821e857adc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2212ebee-a18a-43b7-817e-149f72e6e5c4", "sighting_of_ref": "indicator--4371fae7-c279-49ce-b1f2-3e921dd65697", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9144a06-9c2b-49aa-9457-8d6808a0c134", "sighting_of_ref": "indicator--66059bff-3b91-4325-9164-e0ee94fc50e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85c91d3-65d3-4fa8-8444-f0805e3e8d8e", "sighting_of_ref": "indicator--3cee3cf7-d415-40ab-b0e1-d3d2bcc7b641", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd75e10-ca11-4b41-b870-f054717c62bb", "sighting_of_ref": "indicator--cf5e8e8a-d0c0-4ced-ae96-2fce774a9a31", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e490d5b-3a25-4598-9952-3ea6c2a935f6", "sighting_of_ref": "indicator--bc38cb69-3937-43d6-83a8-87d8a90b73d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59a741f-d2a0-479b-bea9-d7fc5f5f8457", "sighting_of_ref": "indicator--eb0c1d16-ecd6-4018-af8d-907d97536295", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e29ce78-d1fb-44d0-8b64-f69df7aee3ec", "sighting_of_ref": "indicator--f7e572d6-f190-4a28-8a6c-a5fb89a7991d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf1d957-6cb6-4bbc-a423-bb5605b0026b", "sighting_of_ref": "indicator--efe0ba80-7f52-492c-9e42-feb75acdaf03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcb5b4b-bcfb-4c79-8135-a0f7d34e3f07", "sighting_of_ref": "indicator--a220dfb5-a2a6-412e-a651-5b224b6f3a61", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9eaa7f-05fb-4374-b562-a6aa68a57bfd", "sighting_of_ref": "indicator--3936ea84-0cdd-4e2d-8e03-64029cb10115", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93fb872-89ff-4311-8190-2a74f16ff188", "sighting_of_ref": "indicator--320e6f7b-2544-4acc-a9d5-f166f93839b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cfed7a-c34d-49b7-8a4b-0bebdc83fade", "sighting_of_ref": "indicator--b1e297fe-0593-4d1e-8410-9923b4efc8e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40760d1b-8865-4b75-a5b6-864a22071d65", "sighting_of_ref": "indicator--b407b277-92c8-471b-a539-e108114e89ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09075768-e0c7-4399-b31f-4d6508f849c5", "sighting_of_ref": "indicator--5b11847c-06c8-49c8-9483-b045a205ce15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0cded5-f297-4a5a-81aa-8f36b5021f23", "sighting_of_ref": "indicator--1914815d-1fce-4a29-beec-be318c3caa46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fd4bf4-6ae0-4df0-89cc-6684f469b092", "sighting_of_ref": "indicator--192c2214-549d-452d-b87b-4e134212dd48", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93341866-6468-437a-86d6-fc6107d69bf1", "sighting_of_ref": "indicator--74f0e523-3b08-4ebd-9761-8914c186740a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5548cf2-b462-45d3-a3fb-01500cc6aa8b", "sighting_of_ref": "indicator--c4d892a6-14ce-4c4a-8c90-7d5518397d8e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b49f4b0-0c94-4f0d-b373-05f50b564beb", "sighting_of_ref": "indicator--f1b62ef3-e942-40ed-ac46-c3ae16d6ca11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9576860-a91c-4bef-9f3d-4733972505c8", "sighting_of_ref": "indicator--860bcb81-26f0-498b-9326-aef2ddaa1fac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7e22f4-efc5-490a-ae56-96cc9836eb43", "sighting_of_ref": "indicator--ba1e85ec-ec27-41d4-9939-91165bacfde5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f870cba1-3107-43b7-845d-ed7e1973d8b8", "sighting_of_ref": "indicator--04593cf5-ca41-44e8-8fa1-dc6e30e4a13c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84097e4e-2e44-4d28-b4c8-ae16ca1e6364", "sighting_of_ref": "indicator--d80f6f70-e2d9-4d4c-90d2-8409c66d26c2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57189cc2-e2f3-457a-bb9f-ac7dc0587a23", "sighting_of_ref": "indicator--fc04ec9c-fd1b-4da2-9fe5-3f17288ba1d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a555e70a-56e3-4ff4-b9cb-330f5d7a01b4", "sighting_of_ref": "indicator--67df6ce6-5360-45d7-b561-f763301f51b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10751c03-a5ab-442e-9a5c-2500679b9aef", "sighting_of_ref": "indicator--2932cbd4-3135-4696-8f71-ba8ed465db06", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb8df1f-3253-4035-8d41-babde7680e99", "sighting_of_ref": "indicator--2849c8c1-f127-48b7-bc1f-1ee41ac0065b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5bca18-aba6-439a-becb-4b575bc83a5a", "sighting_of_ref": "indicator--800534d7-ce77-4530-999b-325da7ffe5fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc396284-40ed-4160-aa11-02d38c515a5e", "sighting_of_ref": "indicator--d8e83f31-d77b-4d1b-beb9-f9789a2fa643", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c06ff0-ffa3-4cb7-984e-6455d5bd8968", "sighting_of_ref": "indicator--1c2f094d-691a-413b-9f08-718e14e9c3b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418ed00a-3013-4668-ad25-4ceddd035b36", "sighting_of_ref": "indicator--2b8ea44a-ff43-4162-980c-7a52284bdd8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acf05f2-80c7-485a-a0f6-d3caa86cd4d2", "sighting_of_ref": "indicator--792470c2-b5a8-4554-adf9-fe2a85355c3a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec88e0e4-7227-4f7c-97ed-df034194ecd4", "sighting_of_ref": "indicator--bb0639ed-2084-47a6-9691-6c0717895016", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c03427-a9df-4024-8108-3c4a093f7fed", "sighting_of_ref": "indicator--72cb1ab3-4306-4fda-b175-8d9814400a0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3b304b-83a1-4a91-a577-524d58a08688", "sighting_of_ref": "indicator--07ecb872-f62c-4ad7-a49b-37d5a4444681", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81842d3-e736-4486-bb1b-202ade10912f", "sighting_of_ref": "indicator--fe07fbaf-381b-4200-af3f-7e3550a0c206", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a54f41-2eda-4a02-9934-9b17b0f9ee2f", "sighting_of_ref": "indicator--8240d910-0926-4c9d-b7db-a92b9edd8f73", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bd6a94-e4de-4ce2-8ed5-3109c925af28", "sighting_of_ref": "indicator--aac41c79-b3f9-4484-b9e3-86d02aea13c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99126c3a-a014-43cd-91c1-e8f8d67b7d2f", "sighting_of_ref": "indicator--420fec55-4408-4f7f-bd4e-bf96e0353927", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee232620-d65f-493b-9f53-7757cddb8f15", "sighting_of_ref": "indicator--f46c85f8-25d2-47a4-ae95-a7de0f8b2ccd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e71a1d-4feb-406c-82ff-360096d8f567", "sighting_of_ref": "indicator--600cc33d-6b1b-437b-9596-69bce3818faa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd72f98-2148-4275-acc0-2dead2672be3", "sighting_of_ref": "indicator--b74b2b32-8f93-4f60-b58d-82373fb122d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca64bafc-ba90-47aa-a5a0-0dfa8494af19", "sighting_of_ref": "indicator--31805c37-703d-45f5-a997-e0300d713cdb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac2f914-bf61-4b12-809e-bb1b41e1f886", "sighting_of_ref": "indicator--71f298e2-d931-4778-beb3-4b4a9f891fc6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b3bd7f-0603-4a65-a61d-fc17c4d96249", "sighting_of_ref": "indicator--8fbfe33d-835b-4cd8-a51b-411c6c800abd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df47b83-9089-4ebd-983c-89a18b3d6755", "sighting_of_ref": "indicator--94d4273b-0c8f-42b6-af27-2aecdff45faf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3249d157-1d3a-4d4d-b48d-7d739c93b9ba", "sighting_of_ref": "indicator--a874b634-73cd-4554-ba39-65b211ef37fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf591ac-47ff-4f14-b405-f915f69c7e66", "sighting_of_ref": "indicator--4d35c426-111e-49d2-8f05-62fd6ee3e288", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3658237a-d29b-44a3-ade7-f2752672f8d9", "sighting_of_ref": "indicator--82c8a145-2c06-458a-946f-f36e7127b9aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e22a927-f155-49e7-8782-bafb521f0fef", "sighting_of_ref": "indicator--9f4d22c7-8403-4e52-9ad0-1c35945faa47", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ff9d5c-95f4-4cd0-bf7a-d72f0f3d9d54", "sighting_of_ref": "indicator--53a57681-feb7-4016-bacf-005d0c84feac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed95658-fdbe-424c-b123-9ac42abf4c28", "sighting_of_ref": "indicator--14dbd667-1329-4b49-914a-657e9ed40feb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438a2e6d-3238-4d60-a9bc-757f6ef9c2b3", "sighting_of_ref": "indicator--c8b5a512-1da6-43b5-962f-2d89ccacdb5e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b93bc7-951c-4fe4-8cf3-4cfa0810b630", "sighting_of_ref": "indicator--89420109-1425-4c3e-9626-fbddcd3433dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f2cdf6-bda4-4729-80c2-5684a6c38de6", "sighting_of_ref": "indicator--8dc8a45f-3786-4013-8103-b979f87caa6f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1751a4-4fcd-422b-9366-868e5a615f75", "sighting_of_ref": "indicator--f8caab32-718d-4ae3-a9c3-bdb58fa0b4de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad5a426-3224-49c3-9b74-c227ed2b8958", "sighting_of_ref": "indicator--9585a8a1-3993-4f88-8529-7664891069cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82750466-9836-4e17-aa33-1a269b8573a6", "sighting_of_ref": "indicator--43d36f6c-db58-47fe-a280-76ba84fbb92f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117222c4-71a6-401c-a98c-6a7435bc47af", "sighting_of_ref": "indicator--1b4a8066-a626-42e5-9829-7e2bd25201c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2933f47-b950-4e81-b3be-b617b6ce6c99", "sighting_of_ref": "indicator--c38aec48-5fbf-40dc-8fe8-8be9d3afe5c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a46409-fb80-4f90-910d-c4dc8270c5b1", "sighting_of_ref": "indicator--f6cba71d-cca2-4c5f-a154-4717d8291e9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f7d4b9-fc0b-4249-89e2-965e0fcd3ce4", "sighting_of_ref": "indicator--41de9660-bd6b-4b04-91cc-eb1f18e7068c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8570d8-e104-49a9-b271-2e07627da5d4", "sighting_of_ref": "indicator--eb8797ae-314e-460c-afa3-c2f599ad5a57", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ba277a-a1d1-4f79-ab05-a9942a0a2f92", "sighting_of_ref": "indicator--4896616e-0f8e-4867-b845-cd3a30d8436f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ea059c-379f-45a5-807b-3c2228acebd7", "sighting_of_ref": "indicator--678baaac-1513-4ac5-8427-797cf1211bfc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529efc87-ee42-4886-894e-154c2ed896c1", "sighting_of_ref": "indicator--c16c14b5-7211-4ab1-9581-308a035d3ee8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff6c2a5-8da5-4373-9d28-dc2fd8112bda", "sighting_of_ref": "indicator--aed14bb0-80fc-4cc3-b68a-3869bd8cce5c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae209c3-d323-4eef-bfad-461e7e1a7278", "sighting_of_ref": "indicator--efb1c689-fba8-4f4f-9cfb-1051fed1bb4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4221945f-c2d2-4497-ae1b-f917fba4bd73", "sighting_of_ref": "indicator--858da14c-82ba-4f5c-afb7-f7eb7a6ffcf2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96456942-98df-4c53-b8e3-3d93c05fc77b", "sighting_of_ref": "indicator--a1f5a0df-79cb-497d-a729-931fbdce5200", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f54ccf-59b8-4384-b541-5d1495867fd3", "sighting_of_ref": "indicator--b6f7babd-92a4-491a-b780-318f46a509c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3449129-ad8f-422b-a77e-59bce3ba0766", "sighting_of_ref": "indicator--5ad14a36-a91e-41e4-a8c7-97affedaa006", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5925ca5b-5ba6-4023-ab41-f75a192efebc", "sighting_of_ref": "indicator--7678c46a-0612-4de8-8fe6-d9d7764e6287", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd8bdfd-6601-4e8a-8eb4-d9ec7f30777d", "sighting_of_ref": "indicator--a2d5dfb6-081a-478b-9212-5673e0d8d5cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd030d6-20bb-454f-a39f-f07f1dc43177", "sighting_of_ref": "indicator--c76380ca-aa73-4364-be3a-61f25caa4da8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22124113-2853-4afc-84b4-e317ba3285e4", "sighting_of_ref": "indicator--9bdce5c6-d773-4479-85fe-7244582600c1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5121dd-b079-406b-a253-1a1e32ff090f", "sighting_of_ref": "indicator--e50be5bf-aa34-4dc2-b54e-e1906462c608", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17d90bf-99fb-4687-b740-48e444d2890d", "sighting_of_ref": "indicator--b6a40ae8-60ad-48a4-a95a-f327a8a400e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b4ede2-e211-49f2-bda9-52c0d61f2dd2", "sighting_of_ref": "indicator--bb81ca4c-7eb4-4c43-aa07-f392e86d390f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e82f40-3317-446f-8968-c7e6ae3cfe19", "sighting_of_ref": "indicator--db64e4b7-d002-49ee-8930-eec90195de18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5871f835-565b-4cb3-90a8-8fa3998cfcce", "sighting_of_ref": "indicator--53a50e55-1e44-4652-8088-5364a783a2d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55d8f43-1d21-4d68-8077-4fd02054fee3", "sighting_of_ref": "indicator--587016c6-b89a-433d-9965-8a062a8dbde5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3213478e-511d-433a-81e9-b986b215220f", "sighting_of_ref": "indicator--4498b9b3-528c-4ec6-8a20-0d212eed1909", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e56383b-6f99-4a1f-adc5-8f437676a271", "sighting_of_ref": "indicator--e7a21b34-705e-43ae-a65f-14258e6d07a7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f6cded-f081-48ec-ab2c-390995c77157", "sighting_of_ref": "indicator--7d469b3d-7a73-4a39-865a-25d5b60ec9ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fa6334-ca4e-499c-92e8-587cd9a00f39", "sighting_of_ref": "indicator--d15d0b8d-e6a7-42f9-b844-4c396b9b206c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217f2111-6b7c-46f1-a156-96781a2f23aa", "sighting_of_ref": "indicator--bb654816-7367-4892-822f-bf15c93e66b0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d9b13c-1d1e-4c03-a032-6964aceece71", "sighting_of_ref": "indicator--04782a0b-0b75-4350-9f9e-d61aa9126274", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f66f3b2-07c2-48b9-8f4b-5e4e97099fcd", "sighting_of_ref": "indicator--a028b6bd-88eb-4541-a24c-ca95ac875a83", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e781f79d-2471-405b-9db3-e7ec8385d972", "sighting_of_ref": "indicator--3758daa4-1ed5-4d6a-b567-8d6e9f4659de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cacd38-ab5a-4e5e-b5a7-797ddbf5bdda", "sighting_of_ref": "indicator--e8ab38aa-e25e-4555-92c3-747645d0b6ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62ce301-d5be-4acc-80b9-ca38d5c2056d", "sighting_of_ref": "indicator--9b76393a-7c6d-4ccc-973e-80f1602c912e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab68358-53c7-46e4-8b3f-6e1f235b6b6e", "sighting_of_ref": "indicator--ae87c39f-68a0-4fe4-a79f-3b3cc34f179e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443e2e5d-eac0-4edd-afd9-57d7f5f98fe0", "sighting_of_ref": "indicator--1db31d62-8abf-4827-880b-bbaa3917894e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b97b69-32b4-4127-bd4b-4d333acb714b", "sighting_of_ref": "indicator--61688bee-5223-4c24-8af6-d45db4030105", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc97fd3e-aee7-4a73-bb54-31974cd87fd5", "sighting_of_ref": "indicator--109de744-ddc7-4ced-a06a-41f9982b169e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cd200a-9666-468d-8f46-d2b0694f514d", "sighting_of_ref": "indicator--22b56b4b-4f2e-43e3-83ce-150c217e0a02", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55341be-3ea2-4091-b1ff-d9afb662703d", "sighting_of_ref": "indicator--a08aa21d-81f1-43e2-a181-cdc42e5d7e78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c379186-0e8c-49fc-a895-2926369d046c", "sighting_of_ref": "indicator--ac9878c9-29ab-408f-b7a9-24db07f8c6eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5a2afe-de17-420a-9a24-bf792cf8f06b", "sighting_of_ref": "indicator--45a88f3f-af33-46b8-ab6d-77b5881c6f4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc0400d-8cd6-4ace-9436-3e4c8e9b5293", "sighting_of_ref": "indicator--f23ba4cd-d2db-4853-aac2-ddd0080759a1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54846e7b-fa1f-42a0-ade6-dbd5a7add976", "sighting_of_ref": "indicator--63e9c7b5-b9fd-4c7d-9dd1-12d568d4a4eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fea366-c5f5-431b-aab8-e2138627e475", "sighting_of_ref": "indicator--d00b76c7-acbd-4448-929f-30e458b1056b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7aae982-aa18-48bf-a10d-4f697f3d6bd4", "sighting_of_ref": "indicator--99e1854c-cb48-4775-841a-18afd33a5fab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eddd8d-89e6-46a0-bf6c-78effd80af50", "sighting_of_ref": "indicator--ea3aefd5-5825-4feb-aef6-a9c527524d81", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c18af5-52c3-490a-8d36-ae3b1edad75b", "sighting_of_ref": "indicator--7bb92072-a712-4b23-a619-bf9e84dc3425", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a748965d-3b86-41d2-8466-0fcc8df6e353", "sighting_of_ref": "indicator--368af0fe-a7b6-4f52-b224-480f57075594", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728d44b0-eabc-40bb-9258-9fdc323263c4", "sighting_of_ref": "indicator--c6ddb35a-dbc0-4e47-8606-c5d4bffa6291", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe3ee25-838a-4059-b78b-6f6f8f1649da", "sighting_of_ref": "indicator--a1749449-1011-411c-909b-fae9087887c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd4944a-5b8e-442a-8fa6-f94ba6df4942", "sighting_of_ref": "indicator--cde951df-4b77-4464-8f1f-203d982eb0b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950c208d-a112-451d-bcdf-d8bec9aeabbf", "sighting_of_ref": "indicator--494dc96f-dded-494f-a04f-838a56b9278c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364fcfc8-97bb-41ae-a974-16f8392375fc", "sighting_of_ref": "indicator--2aa85aea-796f-4b9e-a517-6e84fab89ca1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b629c7-4454-4044-a204-6bb328ef064b", "sighting_of_ref": "indicator--44d98c46-dcf0-4d8a-a80f-33f2c083bbd3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451775b4-1b86-4298-8eec-3842f372fa0e", "sighting_of_ref": "indicator--a19803ef-f650-4664-83a9-bc96db2e2987", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a22ee5-47cd-45d5-8a0d-ba744e23b717", "sighting_of_ref": "indicator--98212fd9-58e7-4a10-b53f-6647df7ac849", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cd040a-4b36-4ff6-9772-498b685e5454", "sighting_of_ref": "indicator--904ee35a-b890-407f-b225-9d529c04a275", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de43e92d-87dd-4bf5-a601-8498a22c0554", "sighting_of_ref": "indicator--b2fadeb2-a239-454b-a165-e5fc9a370304", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d90a390-9b7b-47c4-aaa9-7d4b616a234b", "sighting_of_ref": "indicator--6eefb614-f3d5-4e2e-a8ff-a6c713400ff7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37f9a71-fd1d-475a-a309-701fdb8168f3", "sighting_of_ref": "indicator--4d1815b2-0fc4-424e-be75-beed0ce9451f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c159bfe-c707-409c-8ed2-4189b164537f", "sighting_of_ref": "indicator--2da1c7d0-593c-41e8-b999-4615fb604db2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1317ca-1795-42df-9162-c7d2bd22d647", "sighting_of_ref": "indicator--b3a5a145-9b1c-4354-909a-d7326b3b867d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305189d4-3e2e-436f-92dd-07e0e6e0356a", "sighting_of_ref": "indicator--b85ff18d-48d1-4fbe-adfd-08b0335efa15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82facb12-ef92-4fed-b22d-24689f2b8cc3", "sighting_of_ref": "indicator--c03a8163-d620-4b4f-b5e7-6d881d429a38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4437beef-2464-495f-8f7c-472104f646ad", "sighting_of_ref": "indicator--4cf3d79e-fafa-44b3-a2d6-54ab34ba295e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e89601-2c8b-4def-b321-cad46ee399cf", "sighting_of_ref": "indicator--da32384a-6e6c-4fd4-8ffb-0c81d0603d6d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea4ab95-a6dd-4b57-8c51-7eeb9be53d2d", "sighting_of_ref": "indicator--b6a29a35-6f4b-45b2-84f8-7ad52f927dee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa9b4d9-74fb-442e-a84c-a99ac13543d4", "sighting_of_ref": "indicator--f977ec40-e1e0-4a60-ae8d-2e2cc6f6519b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12424503-45ac-47c7-bb66-b1744f900d65", "sighting_of_ref": "indicator--94e99134-9980-4f1b-be32-49d74d1c388a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f21f4ac-6292-4de4-9b7c-630079aad26a", "sighting_of_ref": "indicator--6d9956df-eab8-43a7-9ba9-c0d20c963d60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11394497-fd3e-4ca8-9829-159a21d0f2f0", "sighting_of_ref": "indicator--fd66f416-4878-4093-b6d8-7cbf9ef48eda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bafbff-3ee9-4b72-ab59-915180a958c2", "sighting_of_ref": "indicator--8abc1597-0d2a-4d83-9dae-41b425cb6792", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed23515-1b02-45dd-8320-1bbd8cc019fa", "sighting_of_ref": "indicator--ccf57942-085f-4360-ab73-90a90f14ece0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e3a8ab-9f9a-4fa0-a9a5-7bbf52f9ead3", "sighting_of_ref": "indicator--bb968a5e-52ac-4097-aa1f-cb96eddb4f96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304b1d9d-1c09-4a2c-a089-2c0993f910a0", "sighting_of_ref": "indicator--1de77c82-bad1-4ef8-ad2b-b60405753288", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fae98b-2817-468f-809d-85f0c0e12228", "sighting_of_ref": "indicator--b4c636d3-4d17-4831-9063-f86ae52cd0a7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecb0624-862b-496b-adfc-948329a1c6a9", "sighting_of_ref": "indicator--966e4c02-af22-4e7d-a60b-dafb7f3a8f5d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c714cf-2a8a-4998-9155-75304a3c4f11", "sighting_of_ref": "indicator--8bb71f74-1f1c-49eb-aae1-5c1330ca3b39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13849545-6fab-4cca-8304-08e32e9f691f", "sighting_of_ref": "indicator--df0dc948-c2dc-4783-a2d4-4a73e8d81abb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0754873-73f3-411a-82c4-e8308b6f8f87", "sighting_of_ref": "indicator--901287e9-2a4e-4ecb-90ce-e68f8cc7549b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e6a571-e5ae-4227-912a-7e0c835bcd4d", "sighting_of_ref": "indicator--58757012-a313-4d35-9f7f-030834d5d137", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b7f392-395a-4177-b0f7-4e9184f26ca9", "sighting_of_ref": "indicator--c20e8e0d-a573-4988-b7ff-25a48e5dcd71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccf981e-9640-42db-8afa-30160afdb83e", "sighting_of_ref": "indicator--b48e7c7d-561e-4245-9aee-6a2d4b544cb6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3923c5e-a803-4c3c-b30f-0e027f530817", "sighting_of_ref": "indicator--03c83098-4b0c-4b8f-8ae4-f3a5a9d9d2ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049e3c10-0550-41dc-b546-f337bd90b9ca", "sighting_of_ref": "indicator--0a4d5dd5-8616-4edd-9984-70430afcfee0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d531654c-ceee-4bfb-8630-0904fe0b73e6", "sighting_of_ref": "indicator--7e232850-e633-4143-9916-a67a45fb1672", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498fdc61-8add-4248-b2a8-842816f5b9ca", "sighting_of_ref": "indicator--ab0176fd-eec8-434a-927d-b2bcb599a071", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a07cdbc-37f4-4694-b8b3-0c262b480f82", "sighting_of_ref": "indicator--66b0913b-0a62-4661-8f56-d385cd1a7ee6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b151b66d-f5b3-48aa-9881-b29184c5f6fc", "sighting_of_ref": "indicator--28c3321c-4efa-495c-83ec-d8529715d37e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6cc333-fbe4-452a-b22f-7bf30554dfe0", "sighting_of_ref": "indicator--7bd02696-096d-400c-bca6-970243e16023", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b64096-ef20-477e-930f-389e6d00274f", "sighting_of_ref": "indicator--e1115525-ee64-4b5e-a2b8-a95b238f6499", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef87049a-b4c9-407f-93fd-568c3b27f0a7", "sighting_of_ref": "indicator--191f2402-a7c1-4ce6-b0ea-1e2b694f6046", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a894d678-17a8-4bd9-83ab-ca8a8bf9a079", "sighting_of_ref": "indicator--b33fce5d-c390-496f-ad4d-a9344ba8fa2a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6c8269-a2b8-4fec-be13-0c3f579e5c17", "sighting_of_ref": "indicator--588249fd-b140-40c7-8d79-6a4fce65e1ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbf26c1-ed52-4dc3-9d51-8e990363a28b", "sighting_of_ref": "indicator--4b033bd3-34a9-4cee-8328-f580a5019108", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1fb1a7-686b-4de6-afd2-df50a9c72e4b", "sighting_of_ref": "indicator--0e131574-af83-4cd4-aff8-7e20aff3ee6f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efb504c-801e-441b-bc07-e66e058e5f89", "sighting_of_ref": "indicator--61dcfab1-78fb-4957-8715-0a95d3d55bd2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7372f4-901b-417a-99ec-6f6e38f7f2c3", "sighting_of_ref": "indicator--34852059-4680-497d-9064-2e283820323c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805831f0-1150-4294-9e2b-62f828810077", "sighting_of_ref": "indicator--130f805f-4366-4ab8-8c29-7232838b26db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8475618d-6e4e-421c-aa63-126245972784", "sighting_of_ref": "indicator--2c029dd1-0c5e-47f7-bb96-84a52422d4bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31b84f8-00cd-4023-a1b2-e8e864294673", "sighting_of_ref": "indicator--61aa4298-ae08-492c-b7b5-458f7cf07b2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f3033e-11c6-4c87-8790-13847d9efc3d", "sighting_of_ref": "indicator--1d40126a-bbf3-4693-8880-a1d8b95ef5fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c15926-3ae1-4e6c-a8a9-1b65b96d1a4e", "sighting_of_ref": "indicator--ed232a2a-886d-4302-9ca6-8885ccb0fb80", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391760bc-066a-448e-a73e-dffe6bd9a317", "sighting_of_ref": "indicator--0d7cfc47-8b04-495f-9311-3a4ea85902fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a266cca-dc42-475a-81ae-d6a6cbaaaefb", "sighting_of_ref": "indicator--69f820b4-88b7-4d6c-a3ab-214c413d2754", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4c68b9-b889-47c7-8334-75d070435424", "sighting_of_ref": "indicator--a8280010-98ad-4705-92ae-5c44ad4dbc5e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefa6fd4-9620-40db-828a-b0e6ae0efbda", "sighting_of_ref": "indicator--8c8ae9a2-fe68-4ccc-9996-6c1dd0ada50c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74da4e18-db4a-4d50-9c89-271dfa5b293c", "sighting_of_ref": "indicator--a4d222c0-dde8-4d2c-a1d6-949aa0311873", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f5b213-eb39-47df-876d-64ad9ccd911b", "sighting_of_ref": "indicator--fd3518ca-c118-4843-b529-cfdc96d93bc9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785d13fd-4b28-4f82-9c06-8eb37b9ea4bf", "sighting_of_ref": "indicator--2cc17b4a-cc95-4932-90df-b95cbe645302", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41524959-6bef-4147-9016-1f5e67513f26", "sighting_of_ref": "indicator--8d3b28fb-011c-493d-b520-451fdc4cb84e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e9c9e8-6462-434e-af0c-c1874f1364f1", "sighting_of_ref": "indicator--820e66d4-4b7d-4ee2-a308-441b628b1bb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ea5934-1a48-4e28-a61a-78d186a119b8", "sighting_of_ref": "indicator--244fd8ff-eedd-4735-8de0-0ae96ee2781c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cdf102-d3e3-454f-892f-4c9a51f1ab72", "sighting_of_ref": "indicator--2f9b14c9-13e8-4d3b-bb20-91bbe6e19fd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd2df34-f4f0-4044-9e7c-e1a02d25e4fa", "sighting_of_ref": "indicator--6f037dc1-5d4a-4c59-a4c3-53155a815f3f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f19795-aed5-44cc-a1a3-d593164c521a", "sighting_of_ref": "indicator--f9ce8b17-8d80-474b-9ec3-f8b0b1801f23", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0061979b-c8c5-42f4-a1a3-f69662d55b49", "sighting_of_ref": "indicator--6bccf386-517f-4940-abd4-68ad2a00827b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b1f9c7-e5ba-4dc5-828e-03032fec7add", "sighting_of_ref": "indicator--6d5f70f2-4801-4d3a-a42c-26c4466b62a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f235f16c-cd31-4717-b051-b646206cda23", "sighting_of_ref": "indicator--c7f8cda6-3249-4003-8cc9-8ac7d91b5410", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e930cf-47e8-4c7c-8c1a-cd701f98999f", "sighting_of_ref": "indicator--519c8afb-11f7-4a84-9072-ea3ba40f3d67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4870dcea-787a-4169-a593-8f0befbae66c", "sighting_of_ref": "indicator--52690288-1562-48d5-b430-3d61278952dd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0744daa2-ea70-484e-ac7a-81aa737356e9", "sighting_of_ref": "indicator--16b6002a-246c-46e8-bf75-d36747e446a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e47c434-4854-4bad-afab-9c04948e7bf1", "sighting_of_ref": "indicator--9c55d6b2-345b-4473-a649-89c5d0e0fea4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08ed42c-1e2f-4240-8d4e-d340f2b62ed1", "sighting_of_ref": "indicator--1108da11-d2c3-4f6b-ae48-050a384a38ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25369c2e-4979-44dd-a79d-3390ecd62c9e", "sighting_of_ref": "indicator--7f5f3aee-7168-45f1-bf00-2e89e1f87679", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fc9a8a-288d-437f-b734-7df121ae7a58", "sighting_of_ref": "indicator--9b289311-1b85-4898-ac30-88a1cf02a04a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df26894a-63e0-4b49-9e52-c874a4963e1d", "sighting_of_ref": "indicator--108504f0-f125-45ea-b50a-e9fec9b653af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db96a36-d4f4-46de-a235-5402ff6d9e21", "sighting_of_ref": "indicator--40978387-2dae-4730-9542-07ce32cf453b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b910dc5-078a-419e-ab84-b41009530e64", "sighting_of_ref": "indicator--ce5af05b-0eb6-4228-966c-0436864f35aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc640a1-4223-4535-8750-af5bee600bd1", "sighting_of_ref": "indicator--f57527e5-431e-4942-a339-73aec53ba6c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22f7a01-5382-4108-a12e-3777bd5e0436", "sighting_of_ref": "indicator--d0ab73ca-0f3c-4163-b461-a4d7eed61778", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b97059-9f6b-4c80-853e-03060f870227", "sighting_of_ref": "indicator--c74ede41-b81c-485e-b083-1dca81b71b9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6664f145-877f-4b4e-b603-f398d0cb4a53", "sighting_of_ref": "indicator--bc6050a5-af1a-49ea-ae72-337888bcb378", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df779429-0b30-4225-a6fc-43392a4bce77", "sighting_of_ref": "indicator--699bf622-395b-400b-a41f-bfe087b3f330", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49366391-c818-418d-a58f-1a8b96027539", "sighting_of_ref": "indicator--265ba74a-7dcb-435e-ad05-ca4b40609b30", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee645986-598c-45a4-ac7b-d34464bf736a", "sighting_of_ref": "indicator--557a55e7-2d55-445f-b579-af72a7b6441f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0b822d-3a25-486c-82e8-a93f833c5702", "sighting_of_ref": "indicator--9ad5c640-3bce-47d6-9fb7-93ea9fd2b39c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4809e595-ea3b-46f2-bb3d-eee20b2ed9ea", "sighting_of_ref": "indicator--6a1c8d50-ab50-4eaa-bc3e-2928925ee009", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8599e0-90cc-4488-b046-282aaec39713", "sighting_of_ref": "indicator--25f07459-61af-412f-8540-425cd29094d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa25a9a3-631a-4548-b178-ec9e9187108b", "sighting_of_ref": "indicator--19b2838c-f408-43a2-873a-5cb3e856a34d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79480650-7af5-4d59-bc5f-7dccfae43213", "sighting_of_ref": "indicator--183b6f06-552b-46b3-993d-0d1d0f30bfed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e9e6fa-8503-4648-884d-a703574cfb10", "sighting_of_ref": "indicator--ef41a4ed-23a4-4d19-9fff-6b10c4acb7dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47851d6d-1f7c-40f1-95f5-b7a3f2afdf4f", "sighting_of_ref": "indicator--058fa845-3bf3-4b06-8832-30febc08a1ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda2dd6-403f-4439-b53c-d4bd458c07d1", "sighting_of_ref": "indicator--98641f97-3480-4cc3-b297-284c08b02277", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e39f55-2e0e-4ca6-99ff-ddac6cd4ef71", "sighting_of_ref": "indicator--e63a3745-67f2-4c82-b55f-5e06cce5ebc7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b2f72e-1583-4097-84af-3f82497ed24a", "sighting_of_ref": "indicator--f1d2f2db-5de9-4dd4-9b4f-1fea74aee5eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0f8a95-4c31-4aab-859c-a4e3fa3edca2", "sighting_of_ref": "indicator--a282d41e-5429-4d58-9a5b-14a737d13c38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39361d1-bd1d-4353-ac5e-b67055b94b53", "sighting_of_ref": "indicator--44e3670d-c061-4ff1-b4e1-8703624b7328", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8780ef-0aac-40f3-8fd2-f8fc8a911232", "sighting_of_ref": "indicator--86661a0a-80c5-499f-891c-9b9baf3d10d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b4166d-ec45-4a51-97cc-7e9c7aee13ba", "sighting_of_ref": "indicator--fb098d55-0098-4071-bec2-84a1c479bd8f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe13bda8-ee50-4257-afeb-2f17a1b4288a", "sighting_of_ref": "indicator--3a205af8-5882-4d74-9c9d-7efcce68c9e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593df00e-e16c-468f-8b6d-80ab422e7751", "sighting_of_ref": "indicator--86b48bf4-90fa-43a0-8d8f-d66882358a24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843c74c6-e134-4be5-8143-4406ac6aec70", "sighting_of_ref": "indicator--ce99080b-6b0b-4001-9a9d-ff6692176803", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425c1e46-3403-4ac0-bcf2-316c53dcc638", "sighting_of_ref": "indicator--3212c015-2430-4c34-852a-93f268b44ca0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902186be-e052-4fdf-81c7-642d28ba93fd", "sighting_of_ref": "indicator--d09aca69-ecdc-4280-b292-804455835904", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d74d993-5bae-4312-a9fe-444802814a6a", "sighting_of_ref": "indicator--32c0b400-73a3-4257-93f1-44494127f590", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af4375a-5265-4f24-81ec-e553577d0564", "sighting_of_ref": "indicator--884218ec-b3c0-4e3b-9c71-6f1934557701", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a24e1b9-aeca-44c5-979e-cb0e030c3023", "sighting_of_ref": "indicator--b49e4c85-60e3-4f04-99b7-2c40ac10da0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14338ddc-2a25-46c5-9d4a-257b9ad5f602", "sighting_of_ref": "indicator--f7baedea-d2dd-49d2-8955-04b7b1b5316b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a8538b-1b79-46ae-887a-94b93f9928bf", "sighting_of_ref": "indicator--e66b9cea-f2ad-40b0-8bac-eec186c11ee7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74beb692-f27a-4733-a2f3-823431508644", "sighting_of_ref": "indicator--d3afc8fb-f081-4cc5-8db8-e0a6f907d87f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecf42df-9315-4431-9143-93f3428a14a8", "sighting_of_ref": "indicator--310711ba-ec57-44cd-9a0b-782410b128f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aab2a12-6dd3-4992-99dd-d6f9784e2a31", "sighting_of_ref": "indicator--e59283b1-8202-49a5-8479-cebca6e264be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61f9ffb-bd77-4928-8a1e-899c50096e24", "sighting_of_ref": "indicator--db223983-a5f6-46cb-8955-1f299398d844", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59ad60d-fe72-4f69-a13b-567d71ea5a04", "sighting_of_ref": "indicator--f8911b6c-d239-4e16-bb4f-deac97bdc2b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ec23fa-0fb3-4b5f-be96-89c449ca95fe", "sighting_of_ref": "indicator--fe03e50a-dff0-4b8a-8505-7a261a8c1379", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab02a3d-87a5-40eb-9d17-653622dbbc10", "sighting_of_ref": "indicator--2ec834ad-d5fa-4441-a071-4427a6802746", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a656517d-3884-4f8f-8c1b-c7b71956fe8b", "sighting_of_ref": "indicator--fb218d22-5d31-4bb6-9185-b4908e14dc1a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f47215-0e8e-4f06-972a-d075144406e5", "sighting_of_ref": "indicator--bd3294ee-c995-4ff0-ab42-8431ef8c9ef6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c736f40e-4d4e-4b59-bf3f-1a0ea086cae4", "sighting_of_ref": "indicator--4e6f6bbb-4e5d-4b65-b16a-a119f589e5cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a4dd34-baa9-439b-bae8-155ee81fd160", "sighting_of_ref": "indicator--bd1d4494-e5df-49b6-8e90-09c8eaa63244", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4601405-af29-4d8b-943c-2e8c875cbc95", "sighting_of_ref": "indicator--8d74e323-36b8-4618-aeab-09d11384b0f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ee7d10-99a6-47d0-92bb-f497f0028ce5", "sighting_of_ref": "indicator--c07b7df4-05cf-44c2-bf41-efd0d60b9824", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73bf255-4c2b-4895-84d6-d626556cf0d1", "sighting_of_ref": "indicator--67675f63-131d-416c-ac52-86cb457265f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42babd9e-e1f0-42f3-a25a-a95a7c68696e", "sighting_of_ref": "indicator--e77f5bf9-8b7e-49c2-bcf4-c237abc3ec94", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3406e89f-264c-4562-a2d3-6809a9c37788", "sighting_of_ref": "indicator--118765f2-5a0a-4b53-b5f3-db750c146210", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bf8920-a81a-439f-bb9a-9396736fa99d", "sighting_of_ref": "indicator--118765f2-5a0a-4b53-b5f3-db750c146210", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525cc5ff-9893-40f1-a2ef-d5a77e65bd58", "sighting_of_ref": "indicator--a6823978-e4c7-4308-9900-680a5cdd5f03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d31755c-81b0-4347-9a07-7bd992dafc63", "sighting_of_ref": "indicator--a6823978-e4c7-4308-9900-680a5cdd5f03", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788edde4-337d-4953-9160-dc2b0e7e3550", "sighting_of_ref": "indicator--14384aea-941a-49f8-b6c6-3f501a9ae25c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a1b87-05be-4a72-a78d-4e2aba9f7788", "sighting_of_ref": "indicator--14384aea-941a-49f8-b6c6-3f501a9ae25c", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66317de7-4a4b-4619-a1d2-ec9a780fdee8", "sighting_of_ref": "indicator--520ca7b0-9e0e-429a-ae5a-8b34287454b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2464c6fa-d91f-4d37-a678-f710c7ef7b19", "sighting_of_ref": "indicator--520ca7b0-9e0e-429a-ae5a-8b34287454b4", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97fa640-62af-4be9-a67d-1c96a2da2678", "sighting_of_ref": "indicator--42661bcf-de92-47e7-85ae-6ea4b304ad61", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac9e0f9-a32f-407f-a100-e351184fd023", "sighting_of_ref": "indicator--42661bcf-de92-47e7-85ae-6ea4b304ad61", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbf2def-a412-460a-b052-47b0a3ad2de7", "sighting_of_ref": "indicator--968c77e8-7ac4-40bf-a0c4-460fd5ecd0cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feac385-c2d1-4dc8-bce6-8524a35a5e95", "sighting_of_ref": "indicator--968c77e8-7ac4-40bf-a0c4-460fd5ecd0cd", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31799a27-125c-450d-a4d3-f2daeaef326c", "sighting_of_ref": "indicator--fdf6dfbf-1255-43eb-8365-d1c0133b83b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c653b42-580c-413f-a833-041945460e26", "sighting_of_ref": "indicator--e5123f75-a23e-48e7-a1a9-9c9dcf3d1059", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54afcbf3-e67c-48f2-b5fd-656f9271c6da", "sighting_of_ref": "indicator--93109f26-b99a-4dab-ac07-079c9865aedb", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b643eef-1a29-4f0b-91c6-03dc5dfba83e", "sighting_of_ref": "indicator--ebcb0fbd-30a6-4352-9ab7-f3f0c31a7809", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c115e5-91f2-4567-ae8f-39ed9d02777a", "sighting_of_ref": "indicator--c64f2df6-9aa2-46c4-95ab-157da2c0e279", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89cb1a2-c657-479d-98b8-dd213734e9d9", "sighting_of_ref": "indicator--11db776e-0449-4fa2-a809-769430c31b4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5380e7f2-70d9-4e47-bf75-7d21d0484dbe", "sighting_of_ref": "indicator--f2ef8b42-81d4-4bdc-ac1b-2b151b766b0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965819f2-39c2-4b16-a06b-7041fd82c33f", "sighting_of_ref": "indicator--b1c4ff67-a687-41c1-95be-92bda5a9bc85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098fd1af-dd47-42aa-bc4b-65d0ab751c4f", "sighting_of_ref": "indicator--ed3e4f74-d013-4395-a640-bf2474b8bae8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d6c0ab-fb69-4ce5-9f55-c6409004e003", "sighting_of_ref": "indicator--5a5bdadf-95e3-4d27-afe7-0cbf8ac34144", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7359bbb-82f3-4225-b642-21faace31bc9", "sighting_of_ref": "indicator--df2870bc-7437-41d0-931c-68b2b259f604", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e444b7-5ca2-4cc8-943c-cd93ad5a1338", "sighting_of_ref": "indicator--27464acd-22ed-4443-9b03-98484a60be0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59279b6-7fa8-472d-866c-cc0098430819", "sighting_of_ref": "indicator--b27b27be-ed0e-4302-a13b-07aa56ddd2f3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5167ef1-a97e-434b-97f8-2616d9b9c1e1", "sighting_of_ref": "indicator--27e95c48-3827-4c28-bbc1-796b0b8dcad5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e5807-1f33-4bcb-8bc7-4f651567993f", "sighting_of_ref": "indicator--a368f1c1-0f90-4764-b818-86afc716fad9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c9a2a8-44c5-4121-83c5-d5019f9f6d59", "sighting_of_ref": "indicator--c410a9e1-8732-48be-8107-9002f4a60292", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c71248-cac9-430d-ae43-0555901a101b", "sighting_of_ref": "indicator--da90ad20-7c7c-4f60-9c39-b6426a9e2ef9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d57411-5f5e-4ef5-abe1-b9fbbf2d3569", "sighting_of_ref": "indicator--169c7731-395b-4e64-a8a4-4d1e5b54e581", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5a6798-7eaf-46ad-90f1-937226d890b6", "sighting_of_ref": "indicator--b2394f02-bd43-4bdb-bea4-e713832b9bc5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0bb057-5bec-4cc5-8205-fe0f81afe7e7", "sighting_of_ref": "indicator--e94aa21a-6579-41eb-951a-6a2942eb9b86", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f7e272-cc07-4bdf-9336-bf6b6de43bc0", "sighting_of_ref": "indicator--fbd8cbeb-3201-462c-9f8b-1bd2b774a86d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc03046-00ec-4da0-8202-c9724c404b44", "sighting_of_ref": "indicator--8fefb8dd-1611-4caf-8fbd-8ed3d9ec50c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f32be49-28bc-44ed-ae64-a62d0f0943c8", "sighting_of_ref": "indicator--fd5a7213-1ca9-4db2-aa2b-9eb23405cca7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d72d930-d090-4f04-a7b6-ae83466fac11", "sighting_of_ref": "indicator--996684fb-0578-4d18-b96b-25aa1dc65856", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18e4402-801d-4518-9a6f-5c4ffa5526f3", "sighting_of_ref": "indicator--a37592b1-e044-451a-9e7c-872120aca496", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03627bf-35ac-43bc-9907-39b26f5aaf70", "sighting_of_ref": "indicator--86362ed7-bf15-401f-b9a1-724706eea3fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10304272-7051-40c7-b675-0bc67fe0822f", "sighting_of_ref": "indicator--189e8316-97b0-4466-92dc-6e61d42ffebc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4354bb-ee9a-49b8-a4b2-dc8f29ab4f9f", "sighting_of_ref": "indicator--4439b762-7afe-4d37-ad96-21dfde722b4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac4b18c-1eff-413b-9872-554df3b40f0b", "sighting_of_ref": "indicator--919fd9fb-4626-4275-8760-fdde910be9d0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea7f5c5-82bc-4f9d-84a8-5d70c5739395", "sighting_of_ref": "indicator--ed48a98f-5bff-4aea-bbaa-747060939e56", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634f82fa-4227-40f7-ace2-042eaa929796", "sighting_of_ref": "indicator--b8833ec4-6fc4-40bd-8140-5bbb908ddfed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fe6d61-32a8-407e-8615-71c5804d18fd", "sighting_of_ref": "indicator--4e162f62-e26a-440a-89f0-af4d5a886ef2", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031f9963-ba53-4be6-9907-52a3f6ab3a6c", "sighting_of_ref": "indicator--0362272f-f00d-412b-9010-b99d1e443bbd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548982b0-8d36-47ce-b3e4-f20ae0b0298b", "sighting_of_ref": "indicator--9f64db18-3282-4fcb-a619-1e61cc18eb57", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0c45a1-b6af-4b71-8123-8bc40d40b760", "sighting_of_ref": "indicator--160cda21-b0a7-4a60-b299-637e1648881e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92535129-73fd-409c-9cff-f34ac20590e3", "sighting_of_ref": "indicator--218998a3-db12-4009-b6d3-c82bbb66dd64", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58432d4-0165-4cb7-9484-f3da085551ab", "sighting_of_ref": "indicator--34746eeb-2108-49ff-a4db-3b9c540dbf4b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14406fa1-f39f-4d12-91dc-0879e7584f19", "sighting_of_ref": "indicator--287c1900-5290-49e5-8340-a6937bc8dd0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29521906-5707-4ea0-aa05-7414d4f4686d", "sighting_of_ref": "indicator--628fd84e-7e99-496f-9683-0ede3ba0d6d0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13706261-9c86-4bf3-bbbd-d36f775b8760", "sighting_of_ref": "indicator--150478ac-8e78-4772-9008-16b6fbb88867", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae68868-4897-41b1-ad03-4739f1033f2e", "sighting_of_ref": "indicator--72869f5c-1a04-46ba-b193-869eb5db0604", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dfe49c-2cc9-4979-8650-ae7e827d1407", "sighting_of_ref": "indicator--eb90ddaa-df6b-466f-885f-7e88df7acf9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169f7370-61cc-4298-91c9-7c194bf831c9", "sighting_of_ref": "indicator--e70a8911-bbd4-470f-98ec-f1aa6df590a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db0ca5-0484-40ac-835b-d2bc864e5e53", "sighting_of_ref": "indicator--9faeb2ac-717a-499d-a218-a60779d1d0ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a914cf0-0d36-452b-a43a-5f22a59b81d6", "sighting_of_ref": "indicator--cac68748-e85f-4ed2-bcfd-f9fc02c98be7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baff6a4c-0ce5-40ce-ac4f-4202bce7fc2b", "sighting_of_ref": "indicator--a7a0b04b-ae34-4988-8f85-ba1747157da7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3b0965-3e37-497d-bb32-2f06fdf18f7c", "sighting_of_ref": "indicator--c22636ca-5591-4413-9f12-97982e601781", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5d00b7-f333-41eb-a800-7506f74ca73f", "sighting_of_ref": "indicator--e78e34a3-2d16-4be7-a48c-e97a8c70ca59", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09c605a-760b-4237-9867-7872b84dde5c", "sighting_of_ref": "indicator--9cf9e654-b8ee-41b2-819a-9754156c0384", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19d24d2-9798-4b03-85b2-5ea16b7a5345", "sighting_of_ref": "indicator--1964dbe8-36b8-4e7b-b6f3-b863a8bef190", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e602e9b-5f62-40f5-9bec-fc6da0f87534", "sighting_of_ref": "indicator--896bf6e4-7025-4140-9cac-bb51a9df3b9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90683abd-b32e-4c36-a4ee-46cee02d4b80", "sighting_of_ref": "indicator--77c7ff7d-59da-400e-a94b-09e272c22342", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fcaafa-f028-45ed-963c-84083a47c0de", "sighting_of_ref": "indicator--2f8a73b8-eaec-4ee6-9ee7-f992181bdee9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad34885e-cf7b-4c81-8090-d3debe6579c5", "sighting_of_ref": "indicator--ae111be7-655e-4885-877f-19dac852e9d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e199d3-c575-4079-a385-d2b22a28c366", "sighting_of_ref": "indicator--c07aa5aa-9145-4b6c-9463-9b51cee518af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b0a6ca-e818-4c92-b195-cb6fcbba4460", "sighting_of_ref": "indicator--5c6b43b2-ccb3-4157-8c28-297005cbad7a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2e5dea-131a-4e53-beab-96df5ebbef2d", "sighting_of_ref": "indicator--5c6b43b2-ccb3-4157-8c28-297005cbad7a", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14a832e-8520-46a0-be21-2713684894a8", "sighting_of_ref": "indicator--d72e34a9-873b-4d32-a15b-521d510d5552", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc6283f-8849-4492-90e2-e9538a87ffbc", "sighting_of_ref": "indicator--5e69ae8d-80e2-4409-91a2-8e010ca09b22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c3a2cf-2d03-4989-a5c0-676b84d5d23c", "sighting_of_ref": "indicator--b4d032ef-6441-4681-9341-24268c6a7e90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce142001-cfb4-41fc-9972-622a292a962b", "sighting_of_ref": "indicator--f22b5fd9-5925-4311-8993-994a3f44f897", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059182d5-396c-4a20-b065-e36d561b6804", "sighting_of_ref": "indicator--0bb0b8b6-da7d-4e90-8b36-677a130df851", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d011e646-a621-419c-97b3-8ec5b7a53aab", "sighting_of_ref": "indicator--2b179b35-41bf-42d2-bffa-5f2806f7294f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80f4ba2-778b-4cfe-8abd-d5bc27c468c5", "sighting_of_ref": "indicator--efac104e-f659-4b66-b031-1c507355168c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cde362-44ef-4001-b34a-7b3ef59032a6", "sighting_of_ref": "indicator--811e14ce-7c5b-4c1d-ab1b-f34123c73ee1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1274c07e-b7f4-439f-9389-a4ecd4c72cb4", "sighting_of_ref": "indicator--cc1156bf-ec65-49ea-8a81-a115bc8343a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616e2cb9-51ef-421a-8150-0de1fac6ac8e", "sighting_of_ref": "indicator--c78038be-ed4d-485d-b124-7e0c52141630", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81f0c17-6604-402f-8717-c642e2ca9405", "sighting_of_ref": "indicator--e6bc6394-fd38-4c88-bb7d-c3f10b89535f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6bf6a5-65e1-46c5-b6b7-b20ba9be922c", "sighting_of_ref": "indicator--2c7998cd-6206-4070-823e-3cf22d1444ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92837fe5-de13-40d0-a11c-5cdba0ea2c8f", "sighting_of_ref": "indicator--7a028bfd-e5be-43fa-ab50-123000864531", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8ad1de-8842-4bb6-adfa-ece2fb4dd98b", "sighting_of_ref": "indicator--917e3c00-2278-452a-b80c-6715ecf8dfbc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59d4778-792c-470a-b2f3-29784d48e248", "sighting_of_ref": "indicator--86072c67-af78-4072-88d5-4555cf87fe15", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99a699b-cff6-491d-b57a-983f60d598ae", "sighting_of_ref": "indicator--c443703a-bf3d-4787-89d1-05bff5594a36", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244e95f7-d285-4ec7-95b3-fd5be8a03522", "sighting_of_ref": "indicator--34ea9a6e-f46a-4254-8807-d701a90aefbf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03febda7-c208-4566-a553-209815c30467", "sighting_of_ref": "indicator--926c7aa0-bc0b-440a-9ca0-99905a7aaed3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1953094-a116-4a2c-8808-ec5b7c51245d", "sighting_of_ref": "indicator--576f9e8b-1c80-4d56-a773-121088d6c2ae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895f7c66-dd28-40e7-9de9-f09827da31f1", "sighting_of_ref": "indicator--a330b18f-57eb-46ea-b930-51fc67c7a770", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20df7d90-a5f0-46c5-b7dd-7031012bd042", "sighting_of_ref": "indicator--30245bff-abea-4041-a91c-a85c3c40dc68", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16537541-3881-4898-a3a9-66913816b69f", "sighting_of_ref": "indicator--3b1ea9f9-b4b6-4ff4-b3f0-a69ee6815c1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0174d230-e890-4954-b376-042ccfb481d5", "sighting_of_ref": "indicator--fd7d0c75-d328-4493-88f9-569f5bcb9385", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac8909d-fc8d-49aa-afb8-9c2a51c90b03", "sighting_of_ref": "indicator--00bc5878-c920-4adf-abac-52e4b7011ace", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aada555-3571-4e5c-a3b6-e6a900db5c31", "sighting_of_ref": "indicator--67c80984-c8b2-4c08-b75d-72c95d888648", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23453c0-eb27-4cfe-9109-6c3c56693153", "sighting_of_ref": "indicator--5849f32b-f32e-428c-896d-194c52a694ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5eea30-0509-4e66-9726-7bdfbdd8e4b6", "sighting_of_ref": "indicator--70aaab7f-019e-430c-ac06-4aac99de6dcc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afc978a-e3f1-46b8-8a8a-b0e517828bf1", "sighting_of_ref": "indicator--31b9fe35-3d4d-4f6b-8b7c-1e195216195c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13567c43-e4b0-4679-832a-4eea80c92a5b", "sighting_of_ref": "indicator--a5582845-c0f1-407b-b272-39e3a1928720", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d844a16-0489-4210-a77c-2301753dd489", "sighting_of_ref": "indicator--6a417fc6-e249-4568-be03-1d598da34c27", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5535328-7947-4a7b-8485-68f14c9c0193", "sighting_of_ref": "indicator--3ee01ba0-a86b-417f-9566-0c13a89c0ffb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb6ce8d-d009-44c1-88f9-b2edfe80cdc8", "sighting_of_ref": "indicator--7496534b-5999-4e82-a4a6-cca2b552f3e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949b127d-67f6-4c5c-b757-029a38a65719", "sighting_of_ref": "indicator--9e182e87-7aaa-4dd9-ab0f-8b5dae635437", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ff4886-d1d8-47b1-8121-cb315ab90a0d", "sighting_of_ref": "indicator--dd43ff6a-e3f8-42e8-a346-6d8833a35e8a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542cea9c-897c-43aa-bd0e-4104e8e93c03", "sighting_of_ref": "indicator--a5f68d33-2f16-4a18-a4bd-dfd4c8ea0ebf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bc360c-c20f-4a5e-8dee-338a88d8fb3c", "sighting_of_ref": "indicator--286991ac-5fd3-4cfa-a91b-a91ada8c6d2e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34776428-c1a1-4092-9027-f6a38b28b492", "sighting_of_ref": "indicator--56ce5447-541b-4ab6-9e79-d1f66ece63b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a01c00c-4b23-4fa3-860f-73f541955e27", "sighting_of_ref": "indicator--abf0c4f2-372d-4f87-bef8-c74520719126", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8051936f-c1dc-4bc2-b49e-a60e9fd20131", "sighting_of_ref": "indicator--b4faa283-08fd-4a5d-b678-eb7fe4c04896", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1357a1-fe1e-4235-862f-023d42a1b252", "sighting_of_ref": "indicator--95a70b24-2bcd-45e3-a512-1df204abd6a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3bd1e3-41b1-42fd-9a7b-f79f727ebc02", "sighting_of_ref": "indicator--9102adc6-1fb5-4125-b227-b4492f54bee9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4919d3d3-7fd0-4fb5-b584-c8e6c8056dd1", "sighting_of_ref": "indicator--2e96ad20-19e6-4edc-9826-b693644e4729", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3b6dc2-44b2-4282-9b4a-7d3f242c1eae", "sighting_of_ref": "indicator--7218d1db-60a2-44e2-b535-5f310407d6d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bac2bf-949f-4423-afbc-5f0f4ddfa424", "sighting_of_ref": "indicator--7d5c4295-b967-4997-86bd-d0b58db44b42", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65593fdd-7768-4bb8-82aa-fa4dfd6b232f", "sighting_of_ref": "indicator--d8668aa2-d7b5-4c0d-831d-e80acb4ef6eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c3f10d-aa65-4d12-9a55-ab67c0f174b8", "sighting_of_ref": "indicator--12ed6b8a-7d0c-4969-a132-dd901b90ba7e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bd1a67-5bfc-4de1-87bf-8ff01bc87742", "sighting_of_ref": "indicator--b98c1465-e95f-41b0-9ee1-40bfbcd0f16f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d87d8a-d485-4e79-93d8-bf274107d0e9", "sighting_of_ref": "indicator--32f6cb1b-3ef2-4be0-af22-2ec5471f31ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4909ba6-a606-40ca-83c1-fc6b50d4c80d", "sighting_of_ref": "indicator--14f181d1-e836-4e7a-87d7-258684e5150c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6543f6a-3f75-4125-bc01-0a54564cbc53", "sighting_of_ref": "indicator--36df9fc5-a211-45af-9fbf-5e3b72cd3393", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3fff11-0ce2-4db0-b709-ebdbc31f2c9a", "sighting_of_ref": "indicator--17e8eb58-90d0-41f0-a8f5-fd9b3bf60ec4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588f9861-570b-4da2-b475-13c8169a6038", "sighting_of_ref": "indicator--19df01ef-bd38-4bbb-b1ff-4c097155439a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a317a9e-8784-4a40-82d6-4654d2c81d65", "sighting_of_ref": "indicator--f0e5488e-3c9d-48c9-a9dc-3ff672faeadc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958a1147-62c1-4141-a15b-d1a5ac86ed60", "sighting_of_ref": "indicator--96143f4d-f34c-4824-ab31-a40b4695fe96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15df8732-08b9-48b5-b843-cc9f74a70e15", "sighting_of_ref": "indicator--7fe766b4-efbe-4780-9e25-a3786745cfe8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6105bf3-ae7d-4da9-823c-09b82ae1fb1f", "sighting_of_ref": "indicator--b944c7e1-7cc2-4017-b479-4708378660de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddd8081-cdc5-498b-bef8-4918e627ce6a", "sighting_of_ref": "indicator--3c8bc404-0e1f-49c0-b489-b4ce548b84e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3cfe7f-90cb-44df-b3ab-118559479d85", "sighting_of_ref": "indicator--cc9ba564-fb09-4ddd-8eab-67c96437dc20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79567ba0-cf6c-4bb6-8513-3126b36079c0", "sighting_of_ref": "indicator--cc6a50fd-bf7a-4836-bc33-48da79778313", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fb84e5-a280-42e0-8d47-b97212f08ca0", "sighting_of_ref": "indicator--ca056ef1-f9b7-4d2c-aff1-6202fc30a43a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e847c49-e545-407a-8f8d-a852f5565876", "sighting_of_ref": "indicator--6f91a317-f04b-413a-b7eb-617446eb81fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c5892b-e15d-42f8-83c6-f3aa114f4f3d", "sighting_of_ref": "indicator--e6815248-2223-4b40-a99e-c693e8cb3c90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11e43b9-2a24-4b8a-9b5d-2041f4c378ff", "sighting_of_ref": "indicator--16c6b48c-b4bd-4738-b433-748ad5430dd8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72871e83-c1b1-4b3f-b9c3-915a2b29f505", "sighting_of_ref": "indicator--771196db-1d69-467f-bfda-7e2ad0644c5b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ef4bed-d580-4bbe-a0be-644fed3dab44", "sighting_of_ref": "indicator--95e664c3-e76e-4111-968f-7ebccb8593f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c425c9-ed24-4715-b467-54da3f5cbb5e", "sighting_of_ref": "indicator--3a539838-4cb4-482e-b676-e64c4beedd12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f955c38-05a8-46c2-b158-33c8881c636e", "sighting_of_ref": "indicator--e2f0822c-80dc-4b2c-a509-bb84195b7c2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051dcdfb-c5ab-459e-bc0f-de71a2ea43eb", "sighting_of_ref": "indicator--55584155-b066-46f0-9752-c7e90e30f1e2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6518bf-cf7c-4024-9d78-b25d2ab311d0", "sighting_of_ref": "indicator--9b89d196-14de-4a2e-b935-f408037a4543", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef52c764-cb66-4ff1-ab3e-e81de058ed1c", "sighting_of_ref": "indicator--ef482de2-fa9c-4828-8dcb-f94aecfda856", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0423a3eb-177a-47db-bd17-21f7144176a9", "sighting_of_ref": "indicator--d055d245-c981-4860-b76c-1618e9d75593", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97521d4c-7d51-44b1-9db5-ccd62b60ddb4", "sighting_of_ref": "indicator--e4260461-8209-4898-a355-d99aa5ee91cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d1b477-e7ca-470c-b94a-6354fed8f2ae", "sighting_of_ref": "indicator--857f0fc1-8e23-45cf-afb0-fab2396fc1dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23919469-18b3-40ff-96dd-dc7201ac96da", "sighting_of_ref": "indicator--e31f1939-721d-474a-9b01-7be73d00cc6a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c49635-9235-4e89-98d1-c194139b7c09", "sighting_of_ref": "indicator--1327828b-c509-49f5-ae87-f22596eca237", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6259ee-2a0e-4727-b2ab-c4a2f19167f7", "sighting_of_ref": "indicator--5e757f95-4712-4db1-9669-2cbc9ab1b88c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba8a422-e6aa-4326-9691-28faa972a0e1", "sighting_of_ref": "indicator--e10f98b8-0f4d-416a-ad28-f511e03f2efb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fc0d99-c29c-4ccf-bd80-e4fc381154c8", "sighting_of_ref": "indicator--d9333237-b673-4bdc-abd0-fde084899ee3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b634eb-a221-472d-8a81-89b08f0aaee1", "sighting_of_ref": "indicator--afae4a1c-cb8a-420e-9726-3cbfea18981f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52471209-8047-4611-970d-bcc1fb67e31c", "sighting_of_ref": "indicator--bd60f4f2-ba47-4147-86d9-26fc0d76119e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d19459-fe06-49a7-98ec-66e06c65b828", "sighting_of_ref": "indicator--3cbb2be8-0601-4350-853a-5e73ccc8931d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819d13e1-1662-4af0-b375-eeccacc88b9a", "sighting_of_ref": "indicator--f182dd2f-22ad-4589-9330-68fc620c9898", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ebeb2f-deac-4e4d-8cc7-84f6b9d2f2b9", "sighting_of_ref": "indicator--7473f466-956e-483a-8ec0-7d7df208fcf7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab23f612-5b7e-4a78-9297-8df8d379d88e", "sighting_of_ref": "indicator--16d52336-7039-4a50-a74d-1116aaf99ff2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2467925b-3e8f-41f1-ba78-678abf9f40ad", "sighting_of_ref": "indicator--5ac63b7f-2b4e-4970-a41d-bc96007797ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aff6829-18b8-47bf-a24b-2d43df36ce99", "sighting_of_ref": "indicator--ce63698d-90fe-4740-a407-5af6ae6f1ad6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19363fb-60df-441b-90fe-3d42cb711657", "sighting_of_ref": "indicator--31e43a7a-4438-456c-8bf6-66a8cb769efb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c45e55a-9792-4fd7-abee-6b2f76f3239e", "sighting_of_ref": "indicator--7992f0f8-f93c-43de-9dea-f8b27ebb954b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df823ee-bdf0-4027-a91d-a017ac8b6649", "sighting_of_ref": "indicator--c9527893-a049-49b2-9074-d9306a44acfb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db1edb7-d8fc-4ad9-b78b-9dbb19d99840", "sighting_of_ref": "indicator--962ac832-aac6-4e62-988b-e9e950bc4da7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57228e6-a699-4fcc-9455-843586adf36b", "sighting_of_ref": "indicator--13fb3669-0536-42e5-a35f-2fa17fc33f5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8e8505-b42f-4ac1-80e1-7efba4953045", "sighting_of_ref": "indicator--313edd8f-1c47-440e-840f-4f81478e7d5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bca4308-fe25-4495-981b-ad6b15df6991", "sighting_of_ref": "indicator--2be4364d-6e24-40cc-b363-c91f05891b54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae207b61-e4f7-4471-ac70-5d28b9200cfc", "sighting_of_ref": "indicator--912c507a-3039-424e-867c-ad36c15328e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4340bd54-01ca-484a-9bf0-8c029963863f", "sighting_of_ref": "indicator--609f11f4-829d-43b4-bd13-a847fe4bc00e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7205d9-f92b-4783-a76b-e638876a0d03", "sighting_of_ref": "indicator--48102efe-5feb-4988-b8f3-b62034c84b2e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe2c5a1-2a5c-40b7-b000-ea4779eeb223", "sighting_of_ref": "indicator--9aef68f1-3455-44f8-b82f-65c2ad59dcc5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bfab69-efa8-4776-8c37-b4d7cd310d76", "sighting_of_ref": "indicator--6437e0ec-5954-4334-b109-dd713e0f7bba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba858ccf-8a33-4765-b3d8-37306c080a8d", "sighting_of_ref": "indicator--a3354256-93b6-4dab-ac98-00ff3d27af24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008f24ac-72b7-4c8f-a48a-d62e50a4e476", "sighting_of_ref": "indicator--8bff4ea7-6a44-439d-afbe-159b91c2ceb1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0fada1-a553-4098-87d9-773fde2d9ea4", "sighting_of_ref": "indicator--ff44bebf-af46-432a-a57f-f327cddb8d0e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f50dab-88f7-478f-b6b1-c7e521fe243f", "sighting_of_ref": "indicator--2fe6aad4-04b0-4346-85bd-8e006cc80651", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16a57cb-30ac-4794-b327-c59d318f1d8e", "sighting_of_ref": "indicator--6ba7f8ad-224f-40fb-8a94-20f3a4ea435e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ccef4f-b3a3-43aa-823f-1310f3093ddb", "sighting_of_ref": "indicator--1a900b1c-e276-4e8e-98a0-1df02f6e9d12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f66f02-7161-40e9-92d5-aa0b99351557", "sighting_of_ref": "indicator--593751fc-cdbc-4be1-bd27-62229942f624", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a1ac8d-6050-4bcc-bafb-4cf80f88ddf0", "sighting_of_ref": "indicator--b480169c-ba37-4915-9499-7361a5fa801b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c34a1a0-3c37-4646-b08f-3f8cc8c04936", "sighting_of_ref": "indicator--bbd5d285-2724-42d7-a329-1066eff21e4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be250b5-72d0-41e6-a15d-9de72bd8391e", "sighting_of_ref": "indicator--2983d4f0-b530-40b0-9997-d244bddbc683", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c522e8-9f88-4368-81b5-d0e4abc9c2e5", "sighting_of_ref": "indicator--f5a15c59-69d0-4243-9919-cc5a6657a9d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0601b11a-aa09-4b41-86ae-d42f0aad5a68", "sighting_of_ref": "indicator--fe6442eb-117f-4807-9bd8-6aa0471ec18f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3fcb48-c073-42e0-8cfa-6c49b0a5bea8", "sighting_of_ref": "indicator--7090bf6c-c43b-4a56-9b36-cc9541e936cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72224cc-95be-4a2a-941d-0de9841fff7b", "sighting_of_ref": "indicator--4f230db9-d6aa-498b-80e8-42e95948dd0a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fa0824-e694-4742-83c5-46e615687e01", "sighting_of_ref": "indicator--26658b5e-9830-4b0d-a657-2cd7a9fbd882", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb9f186-aa15-41c5-be24-e9534ecb168f", "sighting_of_ref": "indicator--069818c0-8d2b-4980-9b77-7c64b1c4e2e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfcef01-6523-418b-b6b2-112795d41216", "sighting_of_ref": "indicator--5317d417-796a-4aa4-b7f9-dc0ebcd369ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d336cf-e849-414e-b5cf-9f436307938e", "sighting_of_ref": "indicator--c912ad1c-a5bb-4ca6-b7d3-8249330ea4fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f8701-852a-411b-b826-5640cded9d34", "sighting_of_ref": "indicator--8804920e-8016-4d40-8985-4f2708f3f3f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f83f1a-72cb-4587-848a-88b762e3e0df", "sighting_of_ref": "indicator--a6ef8613-f2a9-4b35-a729-b4a845cfb165", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83836f7-c5d1-46ee-afb7-a9154aefdc22", "sighting_of_ref": "indicator--addb98bb-8d6a-4c79-a779-97062aa8c604", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300148a2-bc7b-493e-b87b-1f3f9bc89424", "sighting_of_ref": "indicator--4240a5f4-b7eb-45c6-869e-63dd2192f107", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395896bd-d0d6-41ab-9bbb-b4943e589700", "sighting_of_ref": "indicator--c1de243d-ac64-486a-a38c-0026eb1e4aea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d021cdb-009d-4743-8c33-ab4e54cf224b", "sighting_of_ref": "indicator--bbadc1af-3975-47cf-b0d6-ce374404caf3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b3b0f1-0bee-46a0-a773-6c721eeb24d7", "sighting_of_ref": "indicator--08d586c8-c5a4-432b-90c9-e9ccd3a4bf29", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c195523e-32c6-41fe-a46f-8ee29ab34072", "sighting_of_ref": "indicator--9c89dc91-2b54-44bf-8adb-36e272bc6ac8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38ca7dd-9565-4ffb-994c-073c85792ee0", "sighting_of_ref": "indicator--e1a4a839-9d57-4539-bced-de3a6d38eaf2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaca13a-28f8-45df-93bd-402a12338f58", "sighting_of_ref": "indicator--b977ebef-b580-440d-be9b-64868215ddc4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d9064f-7313-4e2c-8238-35f6bd4caa52", "sighting_of_ref": "indicator--19f49a12-d451-4555-8dbe-bb5501004817", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e8771e-27af-4852-804b-16abf7e80fcf", "sighting_of_ref": "indicator--776eff88-cff6-47c7-8a6c-21151faf017c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac91f00d-e2bc-4dba-a64b-c5d85fa5a640", "sighting_of_ref": "indicator--8ac3759e-774d-476f-bee5-74aa0cad583e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0111c831-07ee-48fa-bd82-85fd29e3ee43", "sighting_of_ref": "indicator--ddab0ca6-f243-4ece-a2f3-5b2074b7e8c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a0b440-2653-4ea8-afa2-45d86f67dccc", "sighting_of_ref": "indicator--4cf1c241-d72d-415b-a731-6ca16d4ec24d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c6869d-112d-407f-810c-9198984bebfd", "sighting_of_ref": "indicator--23215b4c-5bc3-487d-9053-c2fed55b89b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fce8201-d33b-4154-8b80-0551297bcda8", "sighting_of_ref": "indicator--4304321e-c8e1-4f51-856f-87788bea1e4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88e8259-0934-478d-aa67-f7147fbb9c28", "sighting_of_ref": "indicator--303bf066-e7a9-4864-adff-100c2fdcb50c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5309a404-13ca-4d47-9add-f44b07c19a96", "sighting_of_ref": "indicator--07b4749a-2438-4797-925d-c5fa36ddb15a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bcbfdb-c5c2-4c9f-97c1-0aa4c849c42d", "sighting_of_ref": "indicator--8fc79b86-1740-4504-95e2-9e4dba9d3f17", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf71588-ef07-4340-86f1-10169ce34ff6", "sighting_of_ref": "indicator--37ad7e9e-0865-4aee-853a-aaa0e97d8a12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e28c0f-4a71-4101-97df-30c5d280f7c7", "sighting_of_ref": "indicator--c136227c-fe00-4f16-b9ea-79dfd71f7d3f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ea6f4d-bef1-4a56-8efb-8e7abfa5bb1f", "sighting_of_ref": "indicator--2b3e04a5-f59f-4613-a33b-e916b3f17174", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0742d9-7e3e-47a5-968f-614543716c27", "sighting_of_ref": "indicator--49bbbf12-2c27-4ab2-984c-44f9323b5258", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb643045-282c-4dcd-8f79-66308b39e569", "sighting_of_ref": "indicator--1379ed64-af90-4aed-8e57-da6751290878", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e530695-3eb7-41ee-8e5f-c462252a9d8d", "sighting_of_ref": "indicator--622b3d83-9349-48d1-a17b-71f4b4e27f78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85043c7d-2cba-4a8a-b94a-c40675a66bae", "sighting_of_ref": "indicator--3e47b239-6b3e-401c-b26e-3b0a4d0fcac1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839001ee-0698-494e-b3a3-a9e568e367da", "sighting_of_ref": "indicator--6d4e50b2-ecb7-4add-8c58-57ffcd25836f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc93ba46-19d1-47c3-af6c-3c3815d27c45", "sighting_of_ref": "indicator--f5afe1d7-3a9c-4110-b298-da1856f77c9b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef541f8-a727-48fa-a3de-c37e59e7ec34", "sighting_of_ref": "indicator--8292e6b4-417b-4041-b9b1-31d5ff9a6028", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063159a8-a4be-4ca9-8110-454c59241335", "sighting_of_ref": "indicator--435a5507-47c8-48c8-8a7d-ee93c4ea110f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2715cda8-1644-4cbb-ba45-57914357bd0c", "sighting_of_ref": "indicator--d4421ecc-8a23-4f7f-955a-429dc4c0c2fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57c5bd9-f6a5-4c30-9e4e-17e369b34c59", "sighting_of_ref": "indicator--e3eecb9c-7175-47ff-8543-ec136c592ab7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f759f691-5f6e-4e0c-9f24-d985eb3787eb", "sighting_of_ref": "indicator--92fe9020-e9a4-4b8c-aab6-5cd3a4df75b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4157c26f-2f76-47b1-a2c7-e08e1e23a252", "sighting_of_ref": "indicator--4221c5d5-0a72-48f0-a538-59f8ef4805e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650e7021-270a-4793-86cc-54672fe32b6f", "sighting_of_ref": "indicator--fd790723-5fe6-4c6d-9472-2cd8aee705c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e87b278-b1f5-4939-a3c9-066060469298", "sighting_of_ref": "indicator--14202e76-10b0-44f7-9663-af9985f2fb11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a45b5c8-aecb-4c7e-b15b-96b24ee6c1e1", "sighting_of_ref": "indicator--232b1fb1-4a92-4948-a2dc-e42ac1a7cf82", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373a9920-ce43-4917-992b-3ee9816c336c", "sighting_of_ref": "indicator--3e0f4669-7b0f-4964-9ba7-f959c27d78ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e90e2c-b775-4576-a673-f657b1fc838e", "sighting_of_ref": "indicator--2b2c4078-c432-4c68-acbc-2a77b497b661", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61b389c-fe13-48fa-a7d8-103ceea090a4", "sighting_of_ref": "indicator--373d20ca-a207-481d-805f-ff0ed266e896", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cb3901-74c7-4c0d-98fe-fd9fece52bb3", "sighting_of_ref": "indicator--e86c4280-03ed-4044-a916-14af17d32d96", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73651f8-fffe-48b7-b8d9-5c30be03ca21", "sighting_of_ref": "indicator--4da38ceb-a8ed-412d-92ab-5b0877b678bb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7c98c3-404a-4499-be3b-1fe40a43285c", "sighting_of_ref": "indicator--0937ca54-2ca6-4621-a00d-53961c3b212b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ea845b-8562-4bf4-bfc1-6e4a10f6103f", "sighting_of_ref": "indicator--2d3e0624-891a-4f02-93ed-8b02cdf98aa8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034852f7-a18b-4490-ac0f-59de6fbda397", "sighting_of_ref": "indicator--f1e953ed-e8c9-454d-b2b0-68f83dc857e2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2391d9-b195-4fab-a88f-505f4c7a4a04", "sighting_of_ref": "indicator--937e70b4-bf08-4384-85d0-6ead7960e104", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384f753b-dbd0-4960-9736-6a2d7fb314fb", "sighting_of_ref": "indicator--86327b94-18e7-40e7-b9d5-bfa07b6ba6cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7833d671-7ede-4ea4-8a7a-a280dc916df3", "sighting_of_ref": "indicator--854b9f35-9b2e-475f-8659-5f703cc2879a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7817944-df06-49c6-ba17-079b37f2e8d5", "sighting_of_ref": "indicator--f5a981e8-29d6-4465-bfe9-4f078152ebc0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d17f42-b9be-404e-ac5a-f0ebd8aaaf33", "sighting_of_ref": "indicator--c7e174f3-12ed-409a-ba85-f8f8e93019b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c74b14b-f323-4b51-b38d-c9c16c5c25ae", "sighting_of_ref": "indicator--917574a7-be90-4900-a3b1-93e85daca181", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f0cbeb-dd80-45fe-933c-b5b386c90b0a", "sighting_of_ref": "indicator--4b673879-ce81-4eb4-93c1-b974d016cc82", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb8ff30-5521-4694-8a3d-8561401c4737", "sighting_of_ref": "indicator--0ff0699b-f72c-44df-8d53-8f80702623a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052b97d2-231a-48fb-b51b-c06644b4663c", "sighting_of_ref": "indicator--d7c09124-6575-4d7c-9b12-e4bfcbcf3abb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465dc7f1-3ca6-4674-8ed8-65dcb5a29be4", "sighting_of_ref": "indicator--fbf60473-9ca4-41c1-a127-3dae62fd3fc4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d11e2a-21b5-4c45-94ff-a40478b7033e", "sighting_of_ref": "indicator--cc527ce6-d21e-4256-8d20-fe5398a4c5fa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b033562b-cdd9-4363-8cc9-5470c15dd03b", "sighting_of_ref": "indicator--239c7720-200a-4235-aafe-7457e86b7a99", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c789e4ef-0985-4879-8644-5af1497a77dd", "sighting_of_ref": "indicator--ff0c9fb2-a00d-46db-984b-108bb88acc0b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bf8fa0-00c6-4040-96de-74b6c2eeed0a", "sighting_of_ref": "indicator--646c7aba-4be3-41c5-98b3-0da87d02b661", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fba4e6-e852-42bd-b257-61066cd37452", "sighting_of_ref": "indicator--87643ef2-d6dd-4ddf-a2f2-9baa64010496", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812bc42e-11ca-4953-9bda-d43533498554", "sighting_of_ref": "indicator--3896b6f8-5f21-483d-9311-7b3f3393a775", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95bcc70-a1db-461f-806f-60e86cc7a106", "sighting_of_ref": "indicator--abc32590-4aac-41b4-ae61-c2bf3b129cae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c333cad-8e11-44dc-b393-addf5a6ed6c6", "sighting_of_ref": "indicator--83e06327-648d-46ac-afa3-6ec4cad392d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de0f31f-423a-48e7-a528-94c063f0bb1c", "sighting_of_ref": "indicator--33eda826-20a2-4bf2-8a8a-0876a96ec607", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b31810c-55a6-422a-838f-250a763a83cd", "sighting_of_ref": "indicator--29eb21ee-d7f7-4f74-ba96-06f1eaa5cdc2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2960c1b1-948b-4ecb-aced-197f3ed3f45f", "sighting_of_ref": "indicator--ed8ec08b-4e3c-4ff8-9120-b4f5ab6d198b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab49fee-c8c2-476f-a74f-5b9e6fdf8550", "sighting_of_ref": "indicator--c3a39028-0c18-4388-b590-f6087a38fec6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b00ae0f-2f80-46a8-99b1-651898e9207c", "sighting_of_ref": "indicator--8ed3e0ab-3234-4d47-842a-1517149febc3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74fc969-1cfc-49bf-b11a-09bda8e479c2", "sighting_of_ref": "indicator--cd6e05aa-f107-4570-948a-420d673ec630", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdc58fd-3747-4838-b687-6cd0d61e46df", "sighting_of_ref": "indicator--371f67c7-56f4-481f-9cdb-68f0823eda3a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fb40f2-5670-4ffb-9baa-857ae29d6b9f", "sighting_of_ref": "indicator--083d48d3-877a-40e5-a8cb-18aabd57a438", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2562bbdf-0165-406f-bb05-8c9537963e99", "sighting_of_ref": "indicator--8dd56b9f-645b-4a9a-8844-c68e71c73644", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9e5c9d-311b-4610-93f6-69408699645b", "sighting_of_ref": "indicator--9824e853-f7dd-4c1b-9859-b951c2b367aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c71230-22b6-43f9-b9e8-3f00471cac62", "sighting_of_ref": "indicator--b3ca1c18-293c-4c4f-9d26-63dab9cde0fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49fb273-d573-4c86-9f70-318e40b88d60", "sighting_of_ref": "indicator--9b2ae545-6306-4059-8236-806d35edb24d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d287f5f-aed3-4747-b016-b7c51a3673cc", "sighting_of_ref": "indicator--017a05a8-88ca-474e-a3d1-7373087f04d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50f7fab-49a9-4d4a-a139-c317b429939e", "sighting_of_ref": "indicator--deabf691-073f-4422-8584-8925dd3140a3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecc293b-3979-43ac-834e-f4ecf028ad0c", "sighting_of_ref": "indicator--ccaf79b8-5528-49e9-917d-0cf1ab7d39e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a05947-8fc5-4a4c-97aa-05eb4412fce2", "sighting_of_ref": "indicator--28a44bcb-24ea-4a3f-9e8d-493490d09fc9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fb0c2d-48ea-4d2b-beb7-02f2c4b69785", "sighting_of_ref": "indicator--611ef80a-3bb1-4de6-9cfc-fe37b60d1920", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7401b23-936a-474e-a926-903ea856b3e3", "sighting_of_ref": "indicator--09eed8b9-0af4-4a06-a2c5-003dda459e5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3944734-550e-4098-a826-b4f07bb9eca1", "sighting_of_ref": "indicator--5acb29e0-d280-4292-92a8-fd46e04642d9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebe33e5-697b-4536-82d5-8a89649091a1", "sighting_of_ref": "indicator--c87367c7-3a66-43cc-8382-9f67ad57cc1e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d10d3b5-2d71-492a-baf9-681dc8c212f6", "sighting_of_ref": "indicator--5b62bb01-e599-439b-9c78-8e51761ab196", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3d340d-078c-401e-9d5a-870cc577d59b", "sighting_of_ref": "indicator--6d9d273e-481f-44a1-b154-865a774ce57f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df9b77a-75a1-4a75-a459-45d93b741d89", "sighting_of_ref": "indicator--8da283b2-e5d4-454e-9726-d996b389d198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bc4e33-4058-463a-9e16-7f91ca0ea88a", "sighting_of_ref": "indicator--e2dc4131-8000-4b3b-8495-447035f6680b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b2de63-c759-4860-a3f4-ec53a56a2063", "sighting_of_ref": "indicator--5d2b2bbf-f2e7-47d6-a8ea-68100aee8290", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0df1467-3d1a-4b7f-93ce-487fad967b55", "sighting_of_ref": "indicator--48259bb9-b412-474c-8e50-bf6c16a6b5ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20779da9-04a8-4462-a918-238d30456b61", "sighting_of_ref": "indicator--b7591b4e-dc81-4c6d-99dd-a33584eef3a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e825d4e-b0f3-4a6c-9cb6-f97ce612989b", "sighting_of_ref": "indicator--15004750-2138-47e3-b0f1-99516167883a", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e11759f-f675-4a16-bafd-2984d13f1dfe", "sighting_of_ref": "indicator--a0bbec8d-7c67-4581-a1b4-d7d69eb51062", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4ae80c-f566-4c88-9dab-e61c809c238e", "sighting_of_ref": "indicator--ff915c6e-15ea-42cd-b7dd-7e4d0b5c7859", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10bb75f-1311-47ca-ad8d-38161e020a7e", "sighting_of_ref": "indicator--52e1f10a-9140-4a57-83ca-335050aae1da", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f014010c-c324-41d1-895a-4ecbed0ade2c", "sighting_of_ref": "indicator--983599d2-aa4f-460c-ac30-f2535ea26470", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4c2eca-39bb-4b2d-b45c-4acf246c0c10", "sighting_of_ref": "indicator--7fe17a67-b9c0-4878-9eba-e518334b1fcb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1f2b55-f974-4138-a3f8-46a64d86caaa", "sighting_of_ref": "indicator--cb1b2398-f9bf-43c3-b4ba-b08a3f3d2dab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06a2fc3-59fb-4779-9be4-066c564798f7", "sighting_of_ref": "indicator--7b2107b1-fe16-456c-bc40-19c603a41af8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182ae29c-1a5b-4d01-a8cd-97257e1c0d8e", "sighting_of_ref": "indicator--74b7c579-c9ee-4bfa-99a2-9bf61721525d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e821fb6-e118-462a-a052-d219bab6e147", "sighting_of_ref": "indicator--6b4d083c-c4c3-4a12-b633-348621968945", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced84427-d470-4476-89e8-fd020997876b", "sighting_of_ref": "indicator--6e81c2f8-c78f-4023-96a2-8025d18789e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a652b4-43b3-4dd1-bfe7-ef8d3bd40845", "sighting_of_ref": "indicator--dc18c670-0aae-4a00-be17-c7cb7ef5fd5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb462e0d-5af2-4e32-9d6e-cc83a0507964", "sighting_of_ref": "indicator--d327c3ad-b125-4121-93c0-8fa5b57a1c0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca50d7d-5053-4cd8-9cc7-259c499481e8", "sighting_of_ref": "indicator--841788e2-1d95-4ba8-ae62-5792e614cf38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77b9eab-ce59-4fae-b1fd-9ac73ba593d1", "sighting_of_ref": "indicator--72b435a6-5ecf-4616-b4d6-28c0c0cff3f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1f5c8f-ecf6-44fb-bc67-9348c43a412f", "sighting_of_ref": "indicator--aa2498e9-a6b4-4d72-a7b0-be8ff8dbca32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b58f635-8f16-4643-a9a2-0e8c030f37a8", "sighting_of_ref": "indicator--012fdae6-b3fa-46b8-b946-6d085d61dd23", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51194ecc-50e3-48a4-aaec-bfd0032effc8", "sighting_of_ref": "indicator--63d0a390-91f2-4332-85c7-30e44cd38972", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cced9da-baa7-46d2-9ffd-c9e4b226a60d", "sighting_of_ref": "indicator--e3a50f9d-5aef-4c7b-9835-312486aa7f19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a012ed8d-882a-48a4-8804-b602be529136", "sighting_of_ref": "indicator--b9b737c5-f333-4745-9bf6-c8f3140e8f70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497616f9-a7dc-4b87-bee9-8ff7d1212eb5", "sighting_of_ref": "indicator--7c81ccc7-4fcd-429d-8f01-d784c360da55", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217e09c1-af34-4abf-aaa0-16159622a38d", "sighting_of_ref": "indicator--3c454869-ed6b-495d-9c36-a27506081115", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c6d59a-4f6e-45f5-a9f8-1684863cc48c", "sighting_of_ref": "indicator--a1e36119-05a3-4195-8900-a2e5a92a9728", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c087c0-67f8-49bb-bf8b-cb8b4779b39c", "sighting_of_ref": "indicator--59c9216b-a52b-42e0-aeeb-e0ecf4182fdc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd0235a-16e0-411d-b107-74f1f3385f8a", "sighting_of_ref": "indicator--1a828cd8-3871-4c20-81fe-e795b1796b24", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075c5f62-dd5a-4423-a8f3-3a289fb82d1a", "sighting_of_ref": "indicator--4149ceeb-fa58-4e32-8771-4dbb8eb6b5db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9ab426-85fd-4021-bd74-13585f698148", "sighting_of_ref": "indicator--3b40b32b-e172-477c-bdd9-cf54455d8cd1", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4092a8-5bd2-46e4-832c-fa8dab0ad82b", "sighting_of_ref": "indicator--57ce79a0-3012-4393-b22a-f7c739b14af4", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f81f08-111c-41b7-a613-25ae85577cfd", "sighting_of_ref": "indicator--94acffa9-e8f5-42f5-b3a3-3db8c6d2268b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169e2bc7-a31d-495d-8100-211b5671a53c", "sighting_of_ref": "indicator--456b0afb-4394-4c9c-ac6f-d13a57a995ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dc4839-2ba9-4479-97c2-8c1ebd202166", "sighting_of_ref": "indicator--0f08d46e-1d59-4646-9baa-06d0865a36c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0234bb-1ab4-4951-acb6-df7469a2d07e", "sighting_of_ref": "indicator--a0df7398-17f5-4705-9576-e7f0fc21e244", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb222e6a-fd34-4af4-81b7-ae9a68560fe2", "sighting_of_ref": "indicator--5014c76a-2307-4795-9100-d3b006c8575e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3f61e0-efa2-438c-9bac-8b3c8bac1b5d", "sighting_of_ref": "indicator--fb7675bc-4b3a-426f-8ae8-493d42e94644", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb1a957-33a2-42de-811b-7bd3e53524cf", "sighting_of_ref": "indicator--b30937ff-8a8e-4ed9-b09e-49716891d49b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641ebded-284d-4061-8b67-f58fc0c27eff", "sighting_of_ref": "indicator--148b28d2-1773-49e4-993c-862af0d2dc92", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b883be24-ffdf-4683-9fe9-c1cd0aa851fa", "sighting_of_ref": "indicator--839c4598-7b3c-4d55-a43b-a7757bf1c3a7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1f9399-1d49-4a5b-81e9-ffe8e85bd8c4", "sighting_of_ref": "indicator--9b7df025-aa4c-471c-b5cb-b6cdbbe0663a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c798105-7721-407b-8f7b-d8e2c36f0396", "sighting_of_ref": "indicator--f86626c1-0ced-4f79-af09-94a1bc1551d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb45bd59-c1f6-490a-92cc-997c40c6e465", "sighting_of_ref": "indicator--9ece39f5-d9f1-4931-b8ba-e05a8343e9ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7176a893-c3e4-4b2c-b420-cb26b26c334a", "sighting_of_ref": "indicator--465bf5ba-e958-4614-842d-a284ccc8b64c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95efb15f-ac13-4241-86f9-30c493e112c2", "sighting_of_ref": "indicator--704040f9-3f66-4653-87f5-5b816f8ba34b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089e96e9-ef0c-49d5-b11c-49eacfaad624", "sighting_of_ref": "indicator--659cdf41-3537-4eda-a6e6-0ccfa0d75217", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b1c6f6-93ff-45e8-a0b6-4f9c134c3125", "sighting_of_ref": "indicator--7cf348fd-332f-4310-9964-b2f51387510e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20a4c3c-d4ed-480d-8ba0-af2c2cd48d1a", "sighting_of_ref": "indicator--6388e08c-a7db-4450-b61b-8527f838a39a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41be46b-e1e1-4924-b315-a3743ae53815", "sighting_of_ref": "indicator--617cf0a4-3106-4fca-a5c5-9ba9b00675fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331241b6-5111-4f88-ac32-64a50dd4c1ec", "sighting_of_ref": "indicator--c6d175eb-0fe7-4058-a78c-709cfc01d2fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901f553e-8f0a-49f4-8cb1-6e91de3e0f17", "sighting_of_ref": "indicator--7f5327e2-6701-4d18-897b-a16f26ef0833", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a3ce6b-9430-412c-aa3e-1bb0fe2609a6", "sighting_of_ref": "indicator--ad9ab043-e1b6-495d-a7e2-184f8491b12a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954d54fd-6322-4b3e-8aa3-3c48132782cb", "sighting_of_ref": "indicator--464e6414-e043-403d-b65e-c224ef64faaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52967175-292c-4096-9d07-a809e67c8bb8", "sighting_of_ref": "indicator--a8751d5c-d914-4ca8-92f6-57d823c970d7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564471df-4bdb-4fdb-9206-54a4dc8bb153", "sighting_of_ref": "indicator--7840a9ce-1c95-462b-ad7b-b004e0bcd338", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a2c1ca-37db-43e1-bac1-6692b774e546", "sighting_of_ref": "indicator--8303a69d-261f-436d-84a2-b075b36477a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507e1ba3-80b6-4fdc-947f-37a87b7cbaf6", "sighting_of_ref": "indicator--4991edc6-e453-4cd8-a5ad-3e42166292e4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0a5240-f128-4e88-bfb6-783995486ba7", "sighting_of_ref": "indicator--856c2d8e-3365-478e-8d3b-1ba0d9875adf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8793bd-f852-489c-9ace-d23a10790705", "sighting_of_ref": "indicator--d6cdf3b3-b3ad-4a6f-a102-486d7f57fd6c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f6e085-33e1-4e6f-951a-23161f1f2461", "sighting_of_ref": "indicator--23e2eb08-6b63-4d69-9e07-5051d60f726b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e528aca-38f6-4aff-9df4-0985aaaa7e6d", "sighting_of_ref": "indicator--75d728b4-ae99-4a38-bbca-8e1d312444a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae70361c-55d1-49bf-b927-97cc2213d675", "sighting_of_ref": "indicator--b82ff5b4-2ddb-48ba-aedf-4475cd429498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcdcaee-74da-48c4-a911-ace67c00053d", "sighting_of_ref": "indicator--e1f31624-4785-4665-9f02-c058af132fe9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9603a96b-fe4a-4ca0-8bb8-fbc516aa86f3", "sighting_of_ref": "indicator--b46f8ea0-f2b5-413e-bde1-99bb1d71b37e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab13ae3e-c64d-4ea1-8dbb-172e5ea42561", "sighting_of_ref": "indicator--15253271-74e2-4a2e-91eb-caf19000a0d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5036bc-f221-467f-893c-1ac187a9edad", "sighting_of_ref": "indicator--621c3f81-5945-4050-b473-55d6a122343e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6ee9d0-3604-4113-b66b-83475f6e17b0", "sighting_of_ref": "indicator--48b1df4c-47ba-41c4-9a7f-0123ca60d95d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd3b6d0-9282-464c-9042-5b5f2c63d3f6", "sighting_of_ref": "indicator--b543cd03-b887-4ae6-aad0-a1d13df22d2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b98a6e1-5b44-4f1a-9846-03edbbe18d51", "sighting_of_ref": "indicator--3ec3a264-4664-409d-902f-a6952b660f81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad759b0-a06c-4f23-acf8-9122150cb241", "sighting_of_ref": "indicator--88b0e8df-e1e7-4c8b-b7ec-d1f221d5bad1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e402b318-7d49-4f3d-9106-a42adbdb84b1", "sighting_of_ref": "indicator--ef244d02-8e05-4cba-9449-b66797b945bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1267d656-8acb-4b9c-ab58-f7ec5c23c209", "sighting_of_ref": "indicator--040f000e-928b-4d1c-b47f-f4f1b1a06f0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d53fc8-4212-4bca-afa6-808b6890ce3b", "sighting_of_ref": "indicator--d289f3f4-74d3-4b05-adc0-9257f52c8a86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e803c4c-3dcd-44fd-bdab-fea47174560c", "sighting_of_ref": "indicator--9eeac7d1-c0fe-4e36-927e-e66e24dfc97e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46fd039-b7a3-48d9-989a-24c139c3a7e4", "sighting_of_ref": "indicator--7bf2e75b-33da-413c-9d98-068ddcd0094e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f033a498-fd43-4836-8a3c-39b22e536845", "sighting_of_ref": "indicator--592bbd3e-8be9-460d-a173-0623b6a4dccd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02010834-0903-454d-9424-6c15b731c703", "sighting_of_ref": "indicator--623a2d30-d5bf-467a-9a57-abe78b631b04", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49d4ef2-0a95-4b33-85d6-c918b583634a", "sighting_of_ref": "indicator--dd7c7fe0-70dc-45c1-a91d-338c62378b2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff6f4cf-edcc-4998-bd53-8a27e3152b69", "sighting_of_ref": "indicator--239ce8f4-2e1f-4f8c-84e7-ef4a9e6046c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a96d58-2eca-405f-aaa1-ce6c4444346b", "sighting_of_ref": "indicator--e6909211-7fa7-47f5-8462-86d738612dce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f1d031-39f7-4726-9c1f-755a5a10c6ba", "sighting_of_ref": "indicator--b7bfbb20-dcb7-483e-8ea9-a042a2024a6b", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c481d8-3af4-4d65-8da2-dc11b0956b52", "sighting_of_ref": "indicator--6b797fe0-1d4b-4693-b4c1-1042522df8be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1476257f-7c7c-430e-bb42-a9a0b5ae95aa", "sighting_of_ref": "indicator--e404f6ef-0864-456c-838b-03eaff03eb90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216830bb-0aaa-4aea-93c9-48c49fdf7404", "sighting_of_ref": "indicator--90260914-94af-4b0d-810e-e7ea923e1fba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e760e4-268e-4f71-8f25-6fb71ad67099", "sighting_of_ref": "indicator--ffdee531-fdea-45f6-a99c-3e5ef39f5a06", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab3a3eb-bad4-426a-bbe9-710802588523", "sighting_of_ref": "indicator--438d371e-f6e9-4173-b281-7474d995f441", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca446d0-fd5d-4c8b-873d-07a0b073b042", "sighting_of_ref": "indicator--c55340d1-fcb0-4ce2-b42d-7b96380fb4aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac25800-f348-4a35-addb-9060a7d0270e", "sighting_of_ref": "indicator--2addf01a-db4c-4cdc-a307-e5e8b199e860", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af30035-b819-46c0-b90b-9d71a221d94a", "sighting_of_ref": "indicator--24005ba3-02ca-460b-8a25-ea3a46b2e0fc", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85240de-baf7-4fac-ba90-6a3a46d74090", "sighting_of_ref": "indicator--514483a1-68f0-4ffb-b215-14a5970755de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e23ff4a-e337-46b9-927e-9d0a64185571", "sighting_of_ref": "indicator--e099be04-b994-4213-9564-064e07f9244c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0729e1-a44a-4cd0-8c0d-c804d49deb69", "sighting_of_ref": "indicator--81a4c765-4a69-4d66-ab55-a026f96dbf78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed05b398-ce6c-41b7-af39-e8e0c35b49a5", "sighting_of_ref": "indicator--5f9deaad-0b07-4e26-a35e-bc5d49b2b293", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f71eb3b-4f37-4877-a9cc-da14c9df94b4", "sighting_of_ref": "indicator--727106de-0188-4e18-9821-1469aa64aab6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d296988-3f1b-4995-b17f-a86a0902b08b", "sighting_of_ref": "indicator--e124b045-095a-43f9-9fc9-2ae6da16f3b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60742ebe-0a7a-4e84-a0f3-bd16abd39822", "sighting_of_ref": "indicator--5e22e872-54e9-4566-8c78-8f6efeb80474", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fce3f43-3128-4559-bc38-e258f8fb3faa", "sighting_of_ref": "indicator--eb6ac631-5a2a-4b63-8fec-0c8ad3e3836d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c383765-001f-4d62-95e1-46e94d228934", "sighting_of_ref": "indicator--9ae79e76-20e9-44a9-91c1-1dd3f5ed3a4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0389b7-a9f2-4e8d-bc53-63c8386bfa2f", "sighting_of_ref": "indicator--0c7c0302-1869-4992-88b1-1a18c5602815", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb35101-2903-4d48-ade1-f06608ccfa09", "sighting_of_ref": "indicator--0c7c0302-1869-4992-88b1-1a18c5602815", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25450c41-4b77-44af-b83b-0b1e1fc4b572", "sighting_of_ref": "indicator--627fe373-4b53-4698-a487-7ee20abf8331", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d385e6-aa9b-4d09-a224-3908ed510a7d", "sighting_of_ref": "indicator--fc495f19-d289-47bf-b119-effd6dbf0463", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1408b872-7c26-451d-9858-d73a8a3d5d4f", "sighting_of_ref": "indicator--1d8598d7-b404-43d6-a285-9ebdcf6232cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3350950b-91a9-4dfe-855f-7a00e579e72b", "sighting_of_ref": "indicator--40f9f406-d16d-4e2f-9ead-1ff56276ccc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad00f08c-a46f-40b9-bbf9-8d6628859dd7", "sighting_of_ref": "indicator--bc81b281-3557-4608-a18d-fcda203681a6", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe2a488-e5f8-4e0d-95b0-543e036e8393", "sighting_of_ref": "indicator--65e6740e-a27f-4039-acec-27141d7917f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517fd83b-09a2-4be4-a416-57c84802ceba", "sighting_of_ref": "indicator--54fab2d2-0501-4c14-a970-8304702c6673", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b0bbae-1fae-4c88-b194-f69741ed87e3", "sighting_of_ref": "indicator--19a676bb-9be0-4a17-afd0-6c66c4b433fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc17ad53-0454-4520-9402-8c5374b23f69", "sighting_of_ref": "indicator--fd712f77-323a-4f95-baca-7248c10c2013", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9515dbc-b4d3-4f28-8eb8-659412b23e40", "sighting_of_ref": "indicator--688f2651-b97f-4206-a5b7-add08aadb3d1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38a743d-0616-45c7-aead-bcd9205909dd", "sighting_of_ref": "indicator--83fb03d2-7f76-4bf9-bf42-d2f5733e4c08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e59f80-725b-4ba6-a4a9-985dd8ce1698", "sighting_of_ref": "indicator--06257068-d067-4ff6-bba6-b8b34f325b1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96a7e8d-83f2-4742-9189-918c7bf46d0c", "sighting_of_ref": "indicator--d9e304d1-a827-41f8-aa77-f72b2bdc01aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f64e46-29e4-4224-b990-410f60a6c43d", "sighting_of_ref": "indicator--fce07051-7a5b-4e3a-b1e1-30c6c2d63741", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681bb7c9-8918-4402-94af-347000588f42", "sighting_of_ref": "indicator--e74e9c9d-6475-42cb-9f92-4c81ccc752c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc18ba8-3974-47fd-b5b8-e90cde8a67df", "sighting_of_ref": "indicator--69cae00d-2781-40e3-8d2c-3f868b2aebb7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed987b0-ec27-40bc-b112-66d3d0745022", "sighting_of_ref": "indicator--3ae17209-6b9e-4010-bc45-099aa9c04540", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2318b7a9-afe0-49c8-962b-af73ca548a06", "sighting_of_ref": "indicator--5cef5836-01f1-420a-9a7b-3d10d4d95770", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d1f716-4453-448b-bfd1-bb2c37877be4", "sighting_of_ref": "indicator--4818c705-afdd-4adb-b25a-1c1628b54173", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315342ac-6364-44f3-96ba-7ed845fdacc5", "sighting_of_ref": "indicator--d68fd067-f47e-4973-b15a-e025343b542c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd969053-4331-4aad-a94d-61d4223be89c", "sighting_of_ref": "indicator--c7166897-d94e-4744-ba03-124987445a19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b19ba2-7080-43e6-a37b-8a717aa5f2a6", "sighting_of_ref": "indicator--f673cdb4-20d6-4e39-91c2-5575590f010c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1bf630-a03f-4f11-85ec-5c23619fe3df", "sighting_of_ref": "indicator--8b1a3c33-b007-4628-b100-1d1fa9c436fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f948508-45cf-4924-9c0f-ae74530f45b4", "sighting_of_ref": "indicator--bc98a91a-a2f4-4c8b-ae8d-74fb3585d8af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3b2d76-9c50-4f9f-94dc-062908c2b774", "sighting_of_ref": "indicator--91aa16b2-2789-498d-8c0e-b9e8c2dae7ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ffa504-32d0-4617-8bc0-d0396a126ee2", "sighting_of_ref": "indicator--6fbba03d-5310-47cd-992a-14faa3d9f2fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a60eb81-4106-4602-8fd8-b4f1f93601d6", "sighting_of_ref": "indicator--3c9d11de-f5a6-45b5-a392-1bb8de785d38", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ec8714-7c54-4162-9939-2a32c9af4861", "sighting_of_ref": "indicator--9546785b-b910-4ee7-bd31-c36c6a519466", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d730b8-0999-4e80-94f8-36dcb87db086", "sighting_of_ref": "indicator--19302dfd-10df-41e2-94d7-26beaf5fc94f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04281837-b64d-431f-8287-5fc7afc2d938", "sighting_of_ref": "indicator--11b302fc-bc5b-4cde-9884-759b3fc9e95a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891a0b0e-6fe2-4888-b89d-4b845b5b9b33", "sighting_of_ref": "indicator--d18174ff-8569-447d-8e28-cd29035d035b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6e51f7-304f-4ac8-8dc0-0aea791f879f", "sighting_of_ref": "indicator--d4a650d9-e8fd-40e6-b17b-45db349fac78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12906aa0-ed9a-4323-bf93-64e2ed00ce38", "sighting_of_ref": "indicator--cc398982-3415-49f2-a800-fab4b6a295f0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df1a935-4e44-4e59-a534-b68d90b93840", "sighting_of_ref": "indicator--ebf928d2-33c1-4d67-8c78-73bb27b88593", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d38fbc-e103-4fb0-8960-7916a0edf861", "sighting_of_ref": "indicator--8076f074-09bb-4cba-aa28-b9eb8cf41169", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6664276-348f-40bc-8e49-68b99bb7c610", "sighting_of_ref": "indicator--d6d2e88a-e43c-47b8-b286-3c508cc5ce41", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c647b1-2ae5-43cc-b095-442ead62ab49", "sighting_of_ref": "indicator--d36b96e1-c280-49d1-961b-a7d8ffa68967", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9f1ecf-32cc-412d-aa68-fd81c535e787", "sighting_of_ref": "indicator--d0130eb6-0b26-4eb8-a800-07ba3607d475", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06acebca-4c81-4a7f-88eb-11306a9e110c", "sighting_of_ref": "indicator--bb7f6216-866e-4baf-9308-ed455d60f112", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0c0ac8-a62a-4666-a46c-7a39f415c166", "sighting_of_ref": "indicator--a441a394-32f1-430d-b5b9-bf23b9cf94d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4625aebd-1127-4e58-85a0-1cac4c2f9dfe", "sighting_of_ref": "indicator--ddefc47a-22de-48d3-ae99-3a39eb0ce085", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227fe003-d16a-41bb-82b8-9a50ac86ba42", "sighting_of_ref": "indicator--9849be9d-d0a2-4fb8-992a-92678b45dc86", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccec295e-b7a6-4e1c-84d1-df043a4342a7", "sighting_of_ref": "indicator--3cb38b71-e417-4d5c-9f11-e0ee27f50239", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41983900-6f28-46bc-94ab-170a6adfc8ec", "sighting_of_ref": "indicator--df571b72-4251-486f-a079-5b83a9deb551", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8acaf0-990f-40d7-a0a3-b72ab2ecff4c", "sighting_of_ref": "indicator--635f38b4-afa9-4529-9517-ce8e3d29049e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b04dc8d-cb3e-4acf-9029-277ad0ccf093", "sighting_of_ref": "indicator--ae7f9171-37f3-437d-841d-22f8e87b0f1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b48301d-3b8e-4c9e-8304-413a30b7155d", "sighting_of_ref": "indicator--529a9271-e29d-47d3-a630-bebb01c74027", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c97ec3-ba2f-4f5d-9f20-7dd6740dcc21", "sighting_of_ref": "indicator--9a4dae19-49fe-49b0-b93d-fafb5c8758dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff5a34-f1df-43ce-a65e-a9ea0af56873", "sighting_of_ref": "indicator--5f3793fc-1f98-4953-9028-5a6db37cb73e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0772b01e-791d-4e28-8449-06a3af724185", "sighting_of_ref": "indicator--da3e12a3-59d1-4259-af0a-0a8dadeadea2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c17e22-f47a-4d30-8987-b6791ad96ba7", "sighting_of_ref": "indicator--79b3d85d-a872-484d-b493-4cf95a132402", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53361e37-5948-4077-9eb7-049e0f84d5c1", "sighting_of_ref": "indicator--ac42672b-68c7-427b-83b2-ab6c586e7637", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac057e1-b8ed-41c7-b672-04d026518336", "sighting_of_ref": "indicator--e253b61a-ecd3-466f-9778-cd149b1d7233", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4c4d08-30a8-4b47-86ae-29a1581a03e9", "sighting_of_ref": "indicator--70b7c7b2-a381-474f-ab3b-5477874ddb25", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af9ac68-fbaa-4189-89b3-d4b4a7e96e84", "sighting_of_ref": "indicator--d5b309ea-8108-4954-96d9-99e85b120a1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df44fe6-2690-4832-a5e0-0100dce83bdc", "sighting_of_ref": "indicator--8f885526-0a3d-45ab-a19e-3399f9b821ef", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d86067-3753-4633-815a-a082d8866ec1", "sighting_of_ref": "indicator--c01d1c24-98c5-4656-82fc-15544074d42d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d956b49-3ad1-4db9-82b8-f1b25fd5f083", "sighting_of_ref": "indicator--e13f5319-66c9-4af8-80c8-1dc48336dec0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6596ec84-840b-406e-88fe-5a0e7b3939b4", "sighting_of_ref": "indicator--ac8caa94-c936-4bbe-91b5-919390754f78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966c1bbc-de73-49f3-a1e7-fb7e061674e5", "sighting_of_ref": "indicator--f804ef47-e585-4c34-a583-7ce551837314", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d267508-792d-49a7-b0c8-0bc7b3c54a37", "sighting_of_ref": "indicator--ca1f00b3-bb3c-46ff-bd3d-1cbce326bd13", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0451a20e-ddbb-478e-8caa-ce25f7173295", "sighting_of_ref": "indicator--e4abc601-e003-412a-aa40-ca0c1539e804", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f48edc-0670-4d2f-b0ee-4de0828a0a04", "sighting_of_ref": "indicator--02ed6a7b-fa0e-43e5-bf1c-03bca041d594", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bb7294-f73d-47dd-9951-d972fda0e61a", "sighting_of_ref": "indicator--21090ad9-e2a6-4077-94af-2d965ac45acb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68cc362-6414-467f-9f12-5b572e9c457a", "sighting_of_ref": "indicator--11451cdf-a6d3-4c0a-97e7-510443355e97", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab295d5-4cc7-4f4f-9c1f-50e08aef45fb", "sighting_of_ref": "indicator--e9043363-e6f7-45c1-8411-c317dcda8fc4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac59edc-06fd-4eca-b521-d5b9880eb43f", "sighting_of_ref": "indicator--3c382227-f2d1-4320-9a4e-1fadd32c3c13", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fc7428-5848-4812-98ea-d4c50eb96c62", "sighting_of_ref": "indicator--c9d87d7f-ccf8-46fd-a768-230b223149a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456a14e-767e-493a-b27e-60ca8a12b639", "sighting_of_ref": "indicator--14313e39-bd05-44d0-9a09-ebc5917ad710", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160f2c9f-1313-49a4-9c4f-f4b077be55e9", "sighting_of_ref": "indicator--87cd63fb-62b4-4fc6-9e5d-e2eb111c9a4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298cac1c-bc6b-44d2-b28f-59ce91c1d070", "sighting_of_ref": "indicator--5e4aafd0-6ce9-4acb-be2b-f63bcfb0fa4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096fa37a-989c-4a75-9645-101659285a7b", "sighting_of_ref": "indicator--25a51347-d7b5-432a-8d4a-293c53db4d68", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f17a21-6217-4357-8e3a-bd9c8d94b90d", "sighting_of_ref": "indicator--685ffa64-2667-4971-b51a-7d9745e13dce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7401b0ed-99ec-4901-9b30-6f5b1afa7286", "sighting_of_ref": "indicator--53211967-394d-4868-9ea6-092691c9ba4d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965afa16-ece5-4962-a9cd-fd7a5d8755a4", "sighting_of_ref": "indicator--286e9d61-cc4a-44af-b532-8d7e3f7138d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc8d4a-d46e-4e9e-8a48-cce17ca3d3b4", "sighting_of_ref": "indicator--b24137d1-01a3-4afd-8a3e-161948f8b8e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef027a8-55d6-4113-a704-8ffd9f3f867d", "sighting_of_ref": "indicator--8722954d-418d-4484-ac93-f308813e7d9a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6b4add-616d-41d1-851f-da74e0a334f0", "sighting_of_ref": "indicator--96479910-9d75-435f-b88b-e74a3d0bc63c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fa14d6-2e05-4744-858b-8879bfbf524e", "sighting_of_ref": "indicator--dcb55192-e8f1-4c25-a855-ceae1ecd7d67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c9c8b-b04e-4804-b8bf-7cca120924c9", "sighting_of_ref": "indicator--13560baa-5c8f-41e9-afc3-1355e4a6d5f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e43a47-b07c-4fcb-8488-7c174e8b6581", "sighting_of_ref": "indicator--6b8639fb-3209-4e5a-be33-c2ddd13e513d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d744ae-55d9-45f5-9b52-3989a2a441e3", "sighting_of_ref": "indicator--cb914916-0eb5-4de0-b364-6bf059466362", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fcf601-0355-4506-a69e-c7cb62a16a97", "sighting_of_ref": "indicator--ef3d1f78-1d8c-464c-bac7-03c5e79d780b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acd19c3-e3af-4540-af8e-7735789954c6", "sighting_of_ref": "indicator--5f3cef65-c575-4cbd-b344-09f36abc9412", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d127e2-8b73-4000-a64c-3792bd9f39c4", "sighting_of_ref": "indicator--918f8849-5fd1-4039-bfe1-8abdfce6b11b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf181ac2-0cd0-4f0d-9dfb-47d3238f7fd8", "sighting_of_ref": "indicator--443e4cbb-5e3c-40de-b03d-80e415f6c71f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4e25ad-098c-4d90-bae0-56fc52ec83e6", "sighting_of_ref": "indicator--6e1f697d-3781-4cef-b3b5-b48ebd270aaa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263d4f61-51a7-4f09-98a2-cb2919cd9c08", "sighting_of_ref": "indicator--589a96f3-3b60-4efa-9168-9a18bc96ddc3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a1afb3-d69f-4d4d-bf44-55f8d4bc603c", "sighting_of_ref": "indicator--f712c906-3de2-4f04-be8f-eebb25be1943", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6163c8c1-0d98-47cd-9c60-139267aec35b", "sighting_of_ref": "indicator--731d6aa3-8d51-4b30-a560-3ab927bf51a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5efea5-a163-4471-a727-c12e87fb0e12", "sighting_of_ref": "indicator--4ae1470f-a2e9-4afc-8651-e9fd84e92d2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4646b7-f658-4f6e-806f-fe40c33b0176", "sighting_of_ref": "indicator--ac09b42d-d9be-43cf-a757-a29f8cf7b586", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de422ce-bc0a-4eec-9761-1a63b7796a44", "sighting_of_ref": "indicator--b38476c0-9339-496b-9b78-2a5f811d231a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650ffd7c-a957-4912-8ddf-940415d9c46b", "sighting_of_ref": "indicator--20d72522-9d3f-429c-9b90-b124fe2cbddb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab025a2-da59-491a-8fa0-92b434e6452a", "sighting_of_ref": "indicator--717d262f-993a-4e04-9655-d10b65cbe675", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a0f3eb-e2c7-455c-9598-2cbc89b91dbd", "sighting_of_ref": "indicator--56458ee8-f5cc-46ab-880f-0166b780f9b5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9475ef-045a-466b-a0a2-903bedd6731f", "sighting_of_ref": "indicator--066b4213-f4db-476c-a89f-d773d285b009", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40347764-8d0f-40ea-aa84-8a6556285b5c", "sighting_of_ref": "indicator--779c3c17-07a0-40e5-9e16-8e842244dbcc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7871b5f-3734-4023-911d-efa7ab38807a", "sighting_of_ref": "indicator--6e53da52-82d4-4ecb-8d7a-c324c2ecf2ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c9bed3-b92e-4040-a569-8f73576dba44", "sighting_of_ref": "indicator--caf721da-271a-454e-8ebb-20bd16383275", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc51037-5d0a-45f0-9fdc-da816f36bedb", "sighting_of_ref": "indicator--a8fa4727-90aa-4ca9-9392-9398c30bf644", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3921517-8597-4ba2-a795-4a8dadf3546e", "sighting_of_ref": "indicator--99e03731-0e36-4e2d-b4a8-652bce44e0cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e3b53c-f318-4a34-8163-70b49f3dcb8b", "sighting_of_ref": "indicator--1a0bc280-3be0-496e-ba71-70f675e47d93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f002b248-3901-429d-90e8-b90766103b6e", "sighting_of_ref": "indicator--a9606e07-6636-4c23-b1ca-d2f07d9b662c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81102bb0-9a6a-4eba-87d2-9a4623035985", "sighting_of_ref": "indicator--0039fda7-9ac1-4c33-9123-8252f3e7e18c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e98d56-7f9c-4170-98ae-8ccc67410571", "sighting_of_ref": "indicator--74f245c2-78e5-4467-9675-c66ff3776d31", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64628dd-6626-4f2b-938f-70226913b001", "sighting_of_ref": "indicator--a84cd372-98cc-44e5-acfd-1b0a53175c21", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c4950f-9f41-428e-a164-0bf7bef79d60", "sighting_of_ref": "indicator--3654de62-b0f9-409b-97ff-8140c630e764", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceed7e7-ddfc-435c-a500-be820f69dbb1", "sighting_of_ref": "indicator--a23424f0-fbcf-4fad-aacf-0a1715410704", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17047ebf-ebad-4fb3-9a0e-39f5ebdde3a0", "sighting_of_ref": "indicator--4319dbce-c4b9-4dd8-b2e6-1c3145cb05de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609ec5bf-7ef4-4cf9-b68b-906413c73276", "sighting_of_ref": "indicator--06c7eb75-323e-46df-b503-7a20987f5c54", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0fb03e-4bc9-44cb-8d35-085635cce081", "sighting_of_ref": "indicator--aad1542b-38f5-4cee-82b2-53fed9ca249e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dbe75f-fdc7-4073-9d00-a646cf5c1729", "sighting_of_ref": "indicator--85fb2287-8538-4e9d-879d-ea4a337c61fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28c4af2-b263-4829-9af4-0b2e3e40e658", "sighting_of_ref": "indicator--58d6f30f-d53c-4df6-8e66-33b724c978b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb79e630-6829-4d68-a766-d6ef3bb1f883", "sighting_of_ref": "indicator--f5422b0c-5c17-4409-8e5d-77d8a844b72f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd67517-2c15-4add-a544-c60a242c2a23", "sighting_of_ref": "indicator--670c77af-970d-4994-b281-877794ff1f74", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d27179-99fa-4020-91d2-59812447b1a0", "sighting_of_ref": "indicator--b6da220f-12a0-471e-824f-6fdc6c4378cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd3968f-f248-4fd7-a4e3-e296b5343faa", "sighting_of_ref": "indicator--08aa208c-0793-41c9-ac66-4beda10594f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7b1a4f-d3c8-47d1-bfdf-0d1dfd14c559", "sighting_of_ref": "indicator--a0c6a900-85b0-4a62-b31f-86f3ad7b9bc1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd006f6c-b704-4d3f-a6ce-9c27814d9a27", "sighting_of_ref": "indicator--1b58d2e2-c726-4f04-a846-219f046a566f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c90be1-8e10-4ada-97e6-aa0e15d73153", "sighting_of_ref": "indicator--9a595ce0-e66f-4144-80a2-743b03f6056b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bafb022-090b-41eb-822c-e5c1214869cd", "sighting_of_ref": "indicator--62c7a0e6-fabe-4d68-a656-680149879371", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d79d0c-f88d-482d-904e-874351d92b9f", "sighting_of_ref": "indicator--a0ae5af3-d02a-4e2c-bef5-52eed7aebc32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990b46b2-dc08-468b-aecf-7fa78290290b", "sighting_of_ref": "indicator--db1e5d18-1702-4fde-bb4f-77e3bb92dd48", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de96b2d7-656a-49e8-a660-e69905e8715c", "sighting_of_ref": "indicator--b01cf211-76f3-40ae-9404-7431db521564", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da761306-7fa2-422f-aa42-9b516d82b4b1", "sighting_of_ref": "indicator--7b146b99-3f66-43c1-bce4-84a70a5b72e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11b59ca-16fe-4a65-a921-ce6383d0355f", "sighting_of_ref": "indicator--f053850d-af65-4862-a92c-b3b006b40c3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7ddf9c-ba0d-4c25-b3a7-e9c3addb4b1d", "sighting_of_ref": "indicator--a21eea12-59e4-46a4-b22b-18c7dc8f5877", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67184c51-e115-4e1b-8aad-0ae932ba5228", "sighting_of_ref": "indicator--65c3d1a3-8bea-4d50-a2ec-9dfd65e57516", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf079cc-3595-406c-b978-4bd3ce586a40", "sighting_of_ref": "indicator--05f8f62c-f0ee-4d10-a388-5d016d834a90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02822f4-9b48-45f1-b4e6-b1eecf969aeb", "sighting_of_ref": "indicator--5dcd569e-7cfa-495f-b7c2-b8b3d468b44e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd759e08-f39f-4ba6-87cf-dd9a72a47f22", "sighting_of_ref": "indicator--ea558d3f-fd24-4af2-af4c-bfe85d7c1b41", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e32d5f-26d7-42bf-afd2-bf77162d7b7e", "sighting_of_ref": "indicator--eef80edf-da29-47eb-85a2-022efcb18447", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe78153-9962-4c20-8edf-6c871af7b44f", "sighting_of_ref": "indicator--0ff11c68-ea28-49c4-96b0-31864a5566ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7207d5b-55a8-4e9c-b709-31eae1a31229", "sighting_of_ref": "indicator--54de6a55-7184-4d63-b67c-0c71e9d2c9ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac21fea-1e74-4794-bc4a-db4c05a4680b", "sighting_of_ref": "indicator--62b80d34-1339-4ca7-a077-f999bc9df3e6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10be7510-03d6-4bce-9737-7bad751673a1", "sighting_of_ref": "indicator--12739942-ede8-4277-8a46-bc38eee9314e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09d0e46-1232-4db2-9cde-ccf1de9fd755", "sighting_of_ref": "indicator--28a41b28-1904-4b1f-9693-69ac371dd47f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d318482-9c37-4bc5-81cb-19d162a7a456", "sighting_of_ref": "indicator--01afeb6f-f4f1-4c18-8ca6-4f1856af1300", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e610eb5a-4a13-49cc-8688-61f1ca73c1cc", "sighting_of_ref": "indicator--8542a0e1-7762-4edc-a79e-8bf21a42b967", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08b2c58-ea1a-4f83-b0ff-63f39de0439c", "sighting_of_ref": "indicator--d9001d4c-0974-4181-82ac-460342a8d527", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a524e3-0197-41ae-888d-eaa772184ee8", "sighting_of_ref": "indicator--6a2766e2-ba8c-46f8-afac-dc587b0cefee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341d4877-4305-4a97-9d9b-84f5cede5571", "sighting_of_ref": "indicator--278faf07-f2c2-43da-a0b2-919621f6c551", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2361121e-7bb1-46d0-ad2a-1ba5528d8f2c", "sighting_of_ref": "indicator--37ce76b5-0da7-4b0f-875f-454d59f82018", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd58cc51-0314-4a5a-845b-8d21dd7ae084", "sighting_of_ref": "indicator--3b6e95b4-c1d4-40e9-a8e5-48dd4430e2df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136cd09e-d0af-47f4-af17-0ed7e687259a", "sighting_of_ref": "indicator--78443491-e9c9-4ae3-a745-c8c1dbca2a09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512d74cd-e666-4796-8499-e671728cf415", "sighting_of_ref": "indicator--b1e16f82-c016-45d2-833c-23cd2aebd670", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53443643-a5a7-4679-8dfa-4ab00929dcbc", "sighting_of_ref": "indicator--2704bb02-fb3a-49bb-9652-77426219d0ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d75849f-e01a-416f-a40e-10e7e2809284", "sighting_of_ref": "indicator--92ea55fe-3b33-4f05-8d51-b3dc372956f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63da7a02-d754-4c95-a3f5-85aec239ed86", "sighting_of_ref": "indicator--ca0ab053-1fa9-44cc-bce1-933e058fe371", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17895378-1c40-4d69-b8a9-8843136bf18f", "sighting_of_ref": "indicator--67ced4d5-ae21-41e4-805a-be25d7a043e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0d27fb-9a85-4665-9377-017b6161a4b3", "sighting_of_ref": "indicator--ece9381f-dd31-4159-b572-a96cb9076994", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b3fe37-ec34-4e8a-9d3d-068f4b01bf12", "sighting_of_ref": "indicator--bc2d89f1-0af8-4c61-be05-4ce7fcf99076", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dca205-9809-44c8-880d-50afe350531c", "sighting_of_ref": "indicator--15c3d297-df69-4bdd-aa27-984baf5c0828", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8359ac45-0dbe-4701-b2a6-3f01dacf77cc", "sighting_of_ref": "indicator--978759c0-66cc-4572-9403-f07a2a96557c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e344213-44d4-4de2-af4e-a4f5a8ba4c7f", "sighting_of_ref": "indicator--a175143e-5424-4043-8626-3b0acfa693cc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148c2334-93e6-4bae-b527-73c0b0b484f4", "sighting_of_ref": "indicator--299f35d5-e0fe-43fa-8666-f3e249032ae0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88760b40-7f84-49d7-ac24-c7437c2cc6c6", "sighting_of_ref": "indicator--55dc97de-01ac-44f8-bea7-1c5a5e907c5a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd38357-62d3-4d55-a742-52a6734a3de9", "sighting_of_ref": "indicator--e8b984c9-cb9b-457c-803b-894dc0d7d5e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab736504-2fec-446c-a849-5509e0db7f3f", "sighting_of_ref": "indicator--085a4f8f-028c-46bd-9fcc-8499bf474be1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6cf283-20a3-46af-b6a9-bc052caf448b", "sighting_of_ref": "indicator--a4850844-caf7-4a06-a48e-ebba71c3e309", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bdf96a-75c7-4a59-a065-90c056704c4b", "sighting_of_ref": "indicator--1d2d8046-0cab-4174-8e60-ecdebd781af1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befe2bdb-5b00-4daa-a693-b30bb2428267", "sighting_of_ref": "indicator--c6cca526-e67a-497d-89a3-ae28ecfa1861", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e34681-563a-491b-b814-aed52efec931", "sighting_of_ref": "indicator--f1300a6d-0d70-4e8c-bf4c-5fea8576d46e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cd985f-3635-4c53-8063-cee0bf362721", "sighting_of_ref": "indicator--f8ff4a52-e812-41d7-bc28-84e6dbe22bf4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71150e5f-041e-4c98-bd92-6e8b954d6603", "sighting_of_ref": "indicator--328c63d8-27c7-4b11-8201-257d7991d441", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6787d7c-d1cb-4e7b-b9a2-9c253d564403", "sighting_of_ref": "indicator--5b43f8fc-68a3-4ed0-b648-1867b79b7792", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7e9273-00bd-40c8-aa3e-5288b6696362", "sighting_of_ref": "indicator--8f3f588c-c465-4d56-9b75-45352a0913a8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a5a009-fbc4-4e6f-8e6f-b89748a5b8b2", "sighting_of_ref": "indicator--2c5c67f6-2f5f-4e2e-b12a-64c05bce8772", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73b29c9-d37c-4c0e-87bd-91a05e2711ed", "sighting_of_ref": "indicator--a7d18af7-2924-475e-9a6e-8f43fe80d071", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071de6d6-78d2-40ce-a289-6ff36f623af6", "sighting_of_ref": "indicator--5faba1bd-7641-454c-ae57-99f5e6b84a92", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890792bc-1842-41f9-9c5a-ed02cd5f5270", "sighting_of_ref": "indicator--311b332d-0ced-4824-9e92-f9b1a112627e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43688197-b131-4893-8174-1acecb5f2af7", "sighting_of_ref": "indicator--1b91d2db-1941-4a2c-bafc-bb723073968f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad57c59-b8f3-4d87-bd14-07cd28156069", "sighting_of_ref": "indicator--f2b954b3-c18c-4731-afc7-db1eb25cc1c5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b4e9e3-14d3-4ac0-bb87-49565f9c81b8", "sighting_of_ref": "indicator--0f12f618-6746-49a6-a6d5-c88260beb3ea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd8e73e-2a23-4127-9d7d-769402b804b2", "sighting_of_ref": "indicator--ce9d55cb-fcac-4e6e-8406-5b60bbe2bb78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a9a402-95be-46c9-a39c-e04dd7e42dda", "sighting_of_ref": "indicator--6aebba5e-15c9-4699-9752-46f1347b250f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ce81cf-2662-4218-a2dd-38fa38b67703", "sighting_of_ref": "indicator--1d3b8a3b-594c-4a70-bf14-4cabf392f350", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db26185b-082e-48b1-9ca7-5fcfa42aa3a1", "sighting_of_ref": "indicator--cb23d2c9-c40e-485c-adf7-5f62a4b23458", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af542044-0481-4767-be82-89e71ad3d0fb", "sighting_of_ref": "indicator--4c72ccd4-ecb2-401b-af27-a240cc582e12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb22f22-58a4-4f93-bebf-4cfc205b3ffc", "sighting_of_ref": "indicator--3079f146-a89d-4cb9-87eb-33f2a3fce5d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4157051-8648-4f7c-8f12-236a16dfa5f4", "sighting_of_ref": "indicator--f20401a1-1a29-4503-b538-cb0f55f9c18a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e256bbc-8d04-4c2b-9280-3ccdd0c22433", "sighting_of_ref": "indicator--fd3b112a-4d98-4cba-96df-2c5b696ecc39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7f02df-33ba-488d-983b-0def53ab41ed", "sighting_of_ref": "indicator--24fa4bed-0528-41fe-8746-38c52011c954", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bcb2cd-51fd-4e8f-ba96-49f7b7d2b3b3", "sighting_of_ref": "indicator--f951d833-3413-48e7-8862-f51a99596b08", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c8208f-1c15-4fb5-9786-85bae1ddd479", "sighting_of_ref": "indicator--8a627f3d-1245-4b4e-ac86-08c19f19156a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8387336-65d7-4b5f-9dc6-8508e03cbe12", "sighting_of_ref": "indicator--d6f0bbf9-22d0-4d0b-affd-3bf34b8ea45a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4385bf3e-8e81-4ca1-9aa0-22efcd2b6fe4", "sighting_of_ref": "indicator--fafb6eea-3da9-440b-8c9e-873fc2292f25", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d62fb95-3a32-4858-b2db-c57a5683646c", "sighting_of_ref": "indicator--2562b3f0-0df6-4fba-b1bd-d0a3dced9e32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a6589c-86ea-43ff-b045-1eaabbc8bfcf", "sighting_of_ref": "indicator--fcb1fb19-8ba3-4346-a833-b07c0bb99715", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc5f314-6da1-478f-9c46-bc701d70dd93", "sighting_of_ref": "indicator--2281b74d-67a1-45f1-9788-e4c205ee7b41", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679186aa-c437-4e5d-9279-9f15dfb1e944", "sighting_of_ref": "indicator--7f0cc4d3-b935-45e3-91c6-36fd7da141a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164e9414-e60a-488a-9f1a-72fbaaba4989", "sighting_of_ref": "indicator--604bd95d-8349-4c37-84ba-122ec4241691", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6b282e-c1d0-4be2-ba1a-6f5d30c3b6f5", "sighting_of_ref": "indicator--d2cfd7c8-9a5c-4893-9771-9c7fdb55f4b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ceb0d1-e6c2-413f-9481-df230fe615cd", "sighting_of_ref": "indicator--ad267bb2-c760-44ad-9c41-f115f79ee957", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3706a5-1af6-4dd6-a502-0df78d3aee05", "sighting_of_ref": "indicator--daab58b8-f645-4817-b356-8153b7919082", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec8eb25-1e06-4679-bea6-983765bc9adf", "sighting_of_ref": "indicator--8045ef40-bfb6-40ea-b9ea-84d8995d6e22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c7c0de-0d5f-4df6-8756-c700e99635dd", "sighting_of_ref": "indicator--671b0145-147b-4c3c-b85c-f661eef9811a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6539dd5-2023-4c94-b654-943be7443a77", "sighting_of_ref": "indicator--3dbea1f8-804e-4c90-b38d-af70f2972c29", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee3109c-1ae6-45ed-9484-3731c2c8a9e4", "sighting_of_ref": "indicator--8ed094ff-7fb6-4a50-8295-386c7d79cefe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4eb4560-0e84-4ea4-a346-5690a4c65b70", "sighting_of_ref": "indicator--95ba6903-b9a8-4cca-906b-fe27504a54f7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a02b9c4-6ab7-4ba3-a5e4-150f1224cb0d", "sighting_of_ref": "indicator--c2b5d82f-f8ea-44c0-ad23-41c73bd5b6c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d96206b-5346-4ac2-9ab5-d70ab2328a9c", "sighting_of_ref": "indicator--b417cd74-23da-4d74-b68e-4205232402ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac29da3f-8baa-435a-9722-9da32a76252e", "sighting_of_ref": "indicator--19ee20f6-343e-42bb-8d78-bbc802e890ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b39a7fe-c9e5-46de-9b36-8a3080b1d01c", "sighting_of_ref": "indicator--a8e45d41-91d5-455c-9640-ff8caa9a60d1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f50a71-bd83-4ea6-a548-90672380f3b7", "sighting_of_ref": "indicator--96da8b07-bd56-4223-abbf-be020e264986", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2081278-5dc8-4f01-9372-4c531315ac91", "sighting_of_ref": "indicator--2318d7be-3222-42b7-9449-9f83f475c740", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd1fdbc-fc60-473f-8a68-5e1487c6a0e3", "sighting_of_ref": "indicator--a8f594dd-88db-492c-a645-067c5e0c500f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34535ce2-3bf0-472a-b966-17b46df06205", "sighting_of_ref": "indicator--4e714729-dcee-4946-bfda-7bfca31e0b68", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a6c4c1-c21f-48be-8314-cbe7a8054bf9", "sighting_of_ref": "indicator--a2e1cacf-e6fa-471e-ba81-f71cbdbf6648", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69aade5a-129d-4c2f-8ee9-0ad3602dc4b5", "sighting_of_ref": "indicator--17346209-7830-439a-8646-c01b244ea6f3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7ce8df-46e4-4093-aeaf-ddc6d24f8ed1", "sighting_of_ref": "indicator--d48ec084-3286-4509-b1d4-faee1a3fea21", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35429d9-9952-43c6-9584-bd18fa063bc7", "sighting_of_ref": "indicator--9c3d40b0-23f2-4230-99c4-b1444d0f915a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d3c053-4c68-434c-9e9f-604e47982338", "sighting_of_ref": "indicator--d8f8f12e-eeb6-4b86-9f3f-38a02ac972be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7167c1-7a1a-498a-b7d3-6ecb01d51526", "sighting_of_ref": "indicator--d80e72c5-0f82-4a56-ba81-4772eae08298", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3758c493-0c66-4e93-992a-2fa2a4d2de07", "sighting_of_ref": "indicator--33c39804-aee4-4889-bb26-5dc8dc598d4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20737ab-847f-4bfd-b863-bd1a05990597", "sighting_of_ref": "indicator--95db6c97-2474-44c2-9edd-46b1f8be0460", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd339baa-9547-423e-a2e2-688d65e55f42", "sighting_of_ref": "indicator--f01eb80b-334a-48ff-be31-68fac5182e1d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abcff00-50c6-4bee-80c6-3e308a896710", "sighting_of_ref": "indicator--fbf99507-d381-4128-a116-ae06a68995cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48723584-3435-4996-b1aa-a7c589132c51", "sighting_of_ref": "indicator--52b6acc9-4d62-4cec-9860-ac16821528e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca689ceb-4f18-4278-86b9-04d1e464fe70", "sighting_of_ref": "indicator--cbe73c75-88cf-4d1c-b413-f43f9ddbf605", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37028e20-ffe4-47ab-bf9a-dade037117ec", "sighting_of_ref": "indicator--706345f9-db3d-4032-8bc1-dac2232c15e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a4cbbf-435a-41dc-8951-e36760487b11", "sighting_of_ref": "indicator--09fa0cf8-7534-4af6-b5c5-6b4ec27db102", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21189a-e793-4e1a-89f8-ddf6433a039a", "sighting_of_ref": "indicator--58784384-823f-4ac4-97e2-99925b76b503", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96c3746-955e-4f23-9877-c4ae2beb9ca1", "sighting_of_ref": "indicator--2bf74b0f-db2f-4503-ad5b-3269d3d62fc3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d8965c-f133-4cae-b0a4-9fc40d782931", "sighting_of_ref": "indicator--899ab824-894e-41ca-8f7c-7e9d00ca4d26", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e85f17-cae3-4ca5-ab3a-e18aa684d855", "sighting_of_ref": "indicator--a2965c15-1a1f-4bbb-8e1b-bf2078947c25", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bee78f-299f-48f7-bc85-e08997966ad6", "sighting_of_ref": "indicator--23b592b2-6ed1-4f8d-aa6d-1e8016b1059c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2cae3a-a4cd-48d3-9728-d441c070f264", "sighting_of_ref": "indicator--4232338a-2241-435b-8170-4c89d1e19a9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10457e6-c637-473f-ae79-f50b4a6ba695", "sighting_of_ref": "indicator--8d25bdc7-dd9b-42e1-a3df-eb24b669e2b2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9414813c-0cc7-4fd9-86f2-2a457bfbc640", "sighting_of_ref": "indicator--863f5b88-5b71-4833-bc35-0aa09dc320b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da811691-e971-4b0c-af77-c87e133f648c", "sighting_of_ref": "indicator--5cd699ab-351e-47ba-82aa-24a0842ece89", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e2b985-9c40-4617-b278-0d5a004c580b", "sighting_of_ref": "indicator--38b2a721-26cc-49a2-b4d0-5fb2e0b53972", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001446da-e42c-47c1-ae4b-fe03d3c406a1", "sighting_of_ref": "indicator--22eea3fe-60df-4f54-afb4-ba9e7602a312", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55b4f06-f7ee-4cbf-817b-a83ee4f9ab44", "sighting_of_ref": "indicator--11e5dae6-e3ee-481f-8fbc-27dfcfaa4961", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e0e62b-7a09-4ccf-b56e-6c7a3db906d0", "sighting_of_ref": "indicator--bdd643e9-efb1-4a96-a986-e617f7ee41d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64200ed5-4ff7-4050-a4d3-282b1835ed54", "sighting_of_ref": "indicator--0a92a782-6865-46e6-9889-ba165347cb46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad88e6df-2858-4d4f-a8a3-05dad9035fbe", "sighting_of_ref": "indicator--52cf1b9f-a9f2-407f-a25a-d8b15b834119", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27188bba-0fc3-4b5f-aa80-495c80fc93c5", "sighting_of_ref": "indicator--583d01ba-e9b5-416e-9fe0-e189fd397a8f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32222c69-9efc-4189-84ff-28bdcf46c38b", "sighting_of_ref": "indicator--381cb7a2-1a09-4314-831e-135228d6d1ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9724f82c-747b-47a0-a68d-19f0fe3f6e3b", "sighting_of_ref": "indicator--939b9e01-e5ab-40c3-8b62-6296f25b3f6d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb8d803-a664-431c-8ffe-5a01fb94632e", "sighting_of_ref": "indicator--9e1f5109-b4a6-4477-8557-48ac7f5b27fd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9909e029-ae9d-4d6d-90c7-ea19fd0eded0", "sighting_of_ref": "indicator--b6408254-a9f3-4179-b2ca-14959cf08152", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa2addb-1a9f-4300-af99-2089d30646b5", "sighting_of_ref": "indicator--bfe02d97-2011-4f91-abd4-09a7627bf238", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4c7f2d-533e-4d87-b60f-9207caea1563", "sighting_of_ref": "indicator--ee0aca3c-0d9d-45f7-ace1-7216fa042539", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99fe09d-4cbb-40a4-8745-f35571a68061", "sighting_of_ref": "indicator--c5e452e8-8411-46b2-8a25-b8c9bfe70e4e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b836be8-082d-4a96-8a96-eba4a731374e", "sighting_of_ref": "indicator--88cb84fc-1e4f-4d5c-9ebf-6da0afc2fd98", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed4ec3b-ced6-4072-894d-5f41213a7311", "sighting_of_ref": "indicator--dd1b8011-1a78-4897-86b1-80f1b3a7c942", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bd763f-57f6-4b13-b23e-b31c7eddbf4b", "sighting_of_ref": "indicator--994f9921-48c6-4e1f-b79a-3c507389d0ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c899c80-de70-4533-8012-fb7e39b35832", "sighting_of_ref": "indicator--c7eab2e9-5971-4ef8-9c09-351e60a42b2a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1d6cd0-b23b-4747-8283-1de0ef39c8aa", "sighting_of_ref": "indicator--91696640-576d-45d2-a830-0af0c0361766", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b43f77-36e1-4847-8d3b-d0e83d0ae905", "sighting_of_ref": "indicator--fb61fc31-93a2-4a2d-8f56-08c9f1d882c0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57626eaf-7470-419c-a34c-4bb53c72ab59", "sighting_of_ref": "indicator--cac50bbb-1b23-45a6-9710-0c20207566b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5081c2e7-0c88-44df-9011-568732c265c4", "sighting_of_ref": "indicator--7351c3d6-34b7-4c14-ac9c-627357f75884", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ccb827-47ef-4a43-8324-e157efdd74eb", "sighting_of_ref": "indicator--f6a91b54-0eaa-4a35-878a-8ee89a7b337e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fcd452-b559-4065-a052-462238dec4ad", "sighting_of_ref": "indicator--1e7e50d3-667d-4762-9b2f-91209191c1b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41aadfc1-94f8-46b4-b0c4-d3a6f6f32fd4", "sighting_of_ref": "indicator--48e302cb-ac81-4357-aab0-d46a0d2635cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9365254f-fcec-4647-8a7f-6207bf12b93d", "sighting_of_ref": "indicator--b4c6e124-8f12-46bf-9812-b249c1cb1df4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd384e5-cecd-4a9e-a0bb-716ab0d1494a", "sighting_of_ref": "indicator--5cb2e1f7-88d7-4915-96eb-1800df6febd9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e9d8af-3aef-4708-884a-45ef623420f9", "sighting_of_ref": "indicator--52aeaa89-3e31-48b2-bb9a-097e0664a6ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb641c00-6f4c-4313-b18a-7bee33577c42", "sighting_of_ref": "indicator--f3afea9b-3d9d-47c3-9295-3946dd0be7d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b54a3f2-1b8a-4c4b-8084-dca8baeefc98", "sighting_of_ref": "indicator--7f7a29de-e3ff-44f4-a4ba-ec91241886a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbac7666-0e45-436a-9ecc-737b75692d5b", "sighting_of_ref": "indicator--077192ad-60c5-4013-966d-c15fac9cb1ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c413519c-924e-473f-91e5-08b2da008203", "sighting_of_ref": "indicator--6b1684fd-bc3f-4bb1-a532-679ef15db6bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de9fa3a-8d68-4450-bea9-b77c8459f3c9", "sighting_of_ref": "indicator--bddff1f9-e214-4d9d-972d-e87b96570da4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98306e62-1faa-440d-b976-501d3567bf1d", "sighting_of_ref": "indicator--18d65d88-a773-4d32-80d5-e4833bbdeb55", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacd82a2-ef6b-4681-a353-203a6194f3a7", "sighting_of_ref": "indicator--198a7a74-497c-41d3-b12e-8526ca389061", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6958b5b5-df5c-404f-8146-bf2e99a627b8", "sighting_of_ref": "indicator--46b5da45-eec3-43d9-9bd6-553bc8d21d39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a126b39-878d-4301-a7fd-06cbbcf059f9", "sighting_of_ref": "indicator--abdc2d0c-3da0-4cc1-8b1e-a8eaefa8c8a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745f6e18-5f8a-4334-a652-bc1a4f9295c4", "sighting_of_ref": "indicator--c90047e8-69c5-4538-a081-9e7f93e4f15b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248078cd-9a6a-45bb-ac7e-98c6bb346113", "sighting_of_ref": "indicator--6bb77675-9cb3-4a86-83c8-6e09a93793b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af40ff1-d5f0-4f9a-be25-80a39494cfb8", "sighting_of_ref": "indicator--9568b1ea-aba1-4187-b0ca-77fced768ee4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2d71d1-402e-47a9-8eea-e4d38f776d71", "sighting_of_ref": "indicator--e96964e5-6e06-4687-a58b-a9b5fcb37a09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401cdaa0-5395-4cf9-bb3a-13db8f860fd3", "sighting_of_ref": "indicator--86cd448e-a704-46e3-b71d-00e80c858d46", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175c1179-79f8-41bd-8e7a-beb824d3cfca", "sighting_of_ref": "indicator--b27bdd14-6dea-433b-b977-b0254c0cf963", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbed4b70-24f6-48a4-a3ff-9a061888f553", "sighting_of_ref": "indicator--d8e9f394-8cb0-4797-8852-466b0194e69c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b276b87c-a767-40a9-a90a-c020440db2cc", "sighting_of_ref": "indicator--9bcaab78-831a-417b-b419-d08cd46604aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82973b41-ef27-40aa-acf9-14119f2f272d", "sighting_of_ref": "indicator--929907d3-e90d-42f8-ac31-d9a64f5c9c63", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c990f7f2-7982-4510-9dcc-9daf662f3402", "sighting_of_ref": "indicator--f2c28e61-29e4-486a-9b2f-b685956cdc50", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae36e65-9249-41cf-be12-3bfa2fc9698d", "sighting_of_ref": "indicator--d62a0202-f7e0-4da8-adc4-1eed4acace5b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d60ada-2687-4391-bdcf-39fe55f4e1e5", "sighting_of_ref": "indicator--bd250737-fc9c-441a-b223-fe9afcc5282d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8d308b-6919-4637-8fbd-ec5085bde343", "sighting_of_ref": "indicator--8b72ba50-0059-4818-a059-97e655c78e31", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd65201-123e-4c52-9eb0-fef3e82182b8", "sighting_of_ref": "indicator--b3d1da38-21be-4d30-869b-6d4760a29597", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4cc1dd-dd2a-4619-8f49-69a0b3c3e352", "sighting_of_ref": "indicator--bd838df1-9950-4b7e-b18c-e7d8ba08a6db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d075d6-9134-40cf-be8b-3cf4d4322b66", "sighting_of_ref": "indicator--7ef426c2-2898-44f5-8d6d-ae1c7392b6e7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4901f0d4-5641-4b52-92ed-59dbc4e56680", "sighting_of_ref": "indicator--33ed3d4e-31b9-4777-b784-4faa798319ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62ac446-2328-4f57-bd78-c1f1a054ea3d", "sighting_of_ref": "indicator--59c60721-d45c-47e5-9128-7f42375f11ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7fb83b-ec5d-4f4d-be4d-d6508d917788", "sighting_of_ref": "indicator--3ac7ca15-cd4f-46e0-af4b-8e165b15a290", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111e6edd-4a0a-413a-9eb4-9a174ac2806c", "sighting_of_ref": "indicator--07d90fc4-630a-48e5-9a66-a166be9aec4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8710fa18-ba3f-47dd-8471-a810e172c1d0", "sighting_of_ref": "indicator--5bb0a359-c553-4fe0-b029-761ea0eb4ed2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12183d7a-e88b-4cfe-998b-20ab0336a37e", "sighting_of_ref": "indicator--f647ecf0-edc6-4061-a416-9cefda8754ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39f05b7-2845-41c3-b28e-8460a0a285d4", "sighting_of_ref": "indicator--ad185df0-4f21-4de9-9f60-1d3e38494a49", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86df19ee-f0a2-4a7c-a515-610cc5299c5f", "sighting_of_ref": "indicator--6b8736b0-770a-4470-b394-9e8a95164efe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dc8f38-8bb1-42fa-aad3-9a3849b3cf84", "sighting_of_ref": "indicator--9d793d27-d32d-4845-ad92-84e847c6b65e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d2f1d2-cf58-40fb-a0a1-925272c17938", "sighting_of_ref": "indicator--6777f42f-15ad-4e78-b7b5-524555278379", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ba9c8c-8c1c-4e30-97a7-6af227bfe684", "sighting_of_ref": "indicator--db9cac47-1f59-46ce-a5a2-fd55bcbadb1f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531f35d9-228a-4d05-b2c1-1038b55ed71c", "sighting_of_ref": "indicator--246a9f31-0e3a-4306-871a-2cbbbc9c70ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467d89cf-2433-4456-a4d1-f04a25f28dfe", "sighting_of_ref": "indicator--6d1b926b-b3c2-40d3-b896-bb0245d945eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02b6408-d3cd-431c-9e6d-6a6d2a99f232", "sighting_of_ref": "indicator--1891e98e-d87d-4061-a39d-fd97e13a08b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9d984f-103d-424f-9dab-851913806608", "sighting_of_ref": "indicator--afa2267d-3967-4b7e-b0a4-b3712c8bf40b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c67480-d713-4efc-b7dc-e636f7a9cb6e", "sighting_of_ref": "indicator--e48e5f33-f569-4130-92f6-456b8c50e900", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc01d12-7305-4bf9-8a23-94dac19380a9", "sighting_of_ref": "indicator--2f1c772e-10a8-424d-a6be-40b6fb81f712", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4546a4-458e-4bbc-ac88-40495790f204", "sighting_of_ref": "indicator--efc16a09-fc8a-49e7-b092-df8e7810cb94", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda0ceb6-07ce-4b09-ab3d-619e2d3915f8", "sighting_of_ref": "indicator--6481f033-5ad2-4f37-a869-0db67a31990d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4169742f-755c-4ed2-83de-ba52badddeba", "sighting_of_ref": "indicator--c594d22e-787c-4717-8838-0e3786bd8f05", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aeae13-2e13-43fa-a328-2865691427b9", "sighting_of_ref": "indicator--08daf7ea-9d50-49ee-b57b-894766a64dbf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adac2a44-2568-4fd4-a910-02a7975e6682", "sighting_of_ref": "indicator--2b749eeb-02bc-4cb8-b074-6c7cfa4904f3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efb6b28-b372-4bcc-88b6-974686ef6d05", "sighting_of_ref": "indicator--954377b2-e600-4458-990b-479022496ed0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86940f8d-53d4-46d7-bcc9-9aec0ae565e4", "sighting_of_ref": "indicator--baad1990-9092-4cc7-905f-8c07849c2a09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4888c34-6828-43eb-a3c1-160b731c74e6", "sighting_of_ref": "indicator--1a1ddf9e-3392-4338-9a61-58ffa0bf3e03", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8c219b-22b0-4f10-befa-b379c85371a0", "sighting_of_ref": "indicator--2b84814e-4371-4b76-888c-16bce4ab884f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c737c3-7d8c-4bfa-92ae-bb47d6d3adce", "sighting_of_ref": "indicator--6eb7ea69-9f50-47bb-bd67-a915e836c5a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fb2e99-5db1-4b42-b4f1-df2e617ec784", "sighting_of_ref": "indicator--c61b33c1-147b-4129-a625-da16e9fd091a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dba3ced-2f81-4c84-86cd-228c60446cbe", "sighting_of_ref": "indicator--80ab5078-02ad-4bf0-a1c6-89fdcff88f28", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f37f4d-522f-4ba5-ae03-47152047e4c5", "sighting_of_ref": "indicator--b1bf3643-f886-4eca-a1b3-f0cb9b4f5b4b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce27d115-7a6e-4d1b-8a95-b61a204d7971", "sighting_of_ref": "indicator--c59911e3-01b2-445d-8836-3cd174e1fc07", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045b9ba2-a18c-4757-84b8-d0a8bcec7215", "sighting_of_ref": "indicator--0eb0c77b-f4b1-40b6-a210-58c5c13d0117", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e714e839-2ebd-4d33-b82f-7d815e52ab0c", "sighting_of_ref": "indicator--ed728901-d9d6-4858-8843-a084245d7c37", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591eeb49-93e9-4852-8de9-aff0be67e6b0", "sighting_of_ref": "indicator--92978825-ed29-49f7-b0c6-5acc9188b32c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d10fc61-4d8d-403d-a4d0-b4bd622625e4", "sighting_of_ref": "indicator--b7e76c22-46d4-4ced-9d2c-ea33252416ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64354303-f424-47ce-9af6-f1c174b03ac1", "sighting_of_ref": "indicator--ef792b75-192d-48c1-8f90-8dc4b73e29a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a452a043-43ed-4b87-af44-1450acdfeeb5", "sighting_of_ref": "indicator--f7c6afe6-19e0-4bd9-b81f-48a6d98170b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a592b793-0a70-4a0c-8281-0f99b174ceb9", "sighting_of_ref": "indicator--a8dd8bec-7ff8-4b7e-bda1-73654828dcd4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7e33f3-209f-4714-bab4-7f362ce139a0", "sighting_of_ref": "indicator--bec331b3-21d2-4ac0-93f1-508e03179986", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6d4f94-6817-488e-9343-8f417d42ff43", "sighting_of_ref": "indicator--e850ed59-911e-4d28-9950-5e9db855b1bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91512076-6120-4a82-9d0e-f60be816f3c1", "sighting_of_ref": "indicator--200a1386-0c74-4ed7-9f09-d8ad96468e9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c78527-9547-4371-9623-6efbb27d8abb", "sighting_of_ref": "indicator--9f802316-2506-4e25-9eb8-11d6d2179939", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271b48a6-2c7f-4cba-b5b1-64d82f6e6f66", "sighting_of_ref": "indicator--bdcca7a3-18d9-4c48-85b9-07f7a6be2cd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47f6403-c89e-4573-88b7-d5f6ed0aa6a2", "sighting_of_ref": "indicator--0f6488fe-1f5a-451e-ade4-0a2a40e5c559", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb051e44-31be-475c-9301-fbf0608a27e7", "sighting_of_ref": "indicator--19c221da-af4f-4091-8022-0c2ce3ba162f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e97529-8499-4ed2-98fa-738c783cc37d", "sighting_of_ref": "indicator--deb49060-5bd4-4d82-bb6a-81522cc92a13", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec0b7f2-883d-4d07-af1f-f6d220c911ff", "sighting_of_ref": "indicator--e8330709-34dd-4c45-9ab3-f1646f905e58", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af5e234-d02e-4346-838a-8bb6f83590b3", "sighting_of_ref": "indicator--a12e7935-ffbc-4cb9-b171-485936c524ff", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bce4b2-2562-4397-b756-c58f0ab87130", "sighting_of_ref": "indicator--fa9e460e-2473-4079-adc8-1f72ef59919e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccf062d-e19d-4cb1-83f6-9f6a80bd1915", "sighting_of_ref": "indicator--c791ffa2-043d-4a51-9ab5-e28a59aa522f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9286df0-5363-48fb-9200-cc15e108db79", "sighting_of_ref": "indicator--eaad44f2-8a4d-42a7-ba67-bb5b5785ec2b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e870ce22-b2e4-45b1-8f9e-8dac0b386586", "sighting_of_ref": "indicator--8c057a77-bf2b-4a75-9216-1c5575c7006d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0542989-ac12-4ca2-9e25-2706a3196470", "sighting_of_ref": "indicator--14be8222-6595-48cf-a926-9985c9b993bf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9da2ec-59f6-4e94-9a96-b9e8ee2d9e14", "sighting_of_ref": "indicator--31d91c44-eeb5-4a6a-a786-c6e34754ffd5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a161c7e7-e69e-43bf-bbbd-0615df8b38b4", "sighting_of_ref": "indicator--3943f3a6-82e6-4e88-9f16-27ad654765a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c173a6e-0876-44f9-ad6a-547bdaf970ea", "sighting_of_ref": "indicator--4da4f428-94ac-4771-97a2-c13f1ad0d62c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b18b78-4d0f-42f1-b531-25c952bc1657", "sighting_of_ref": "indicator--ccf6b8d6-b24e-41bf-a9f0-a75eaa9bc6b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81ec70d-c502-46f4-8d16-d51e9cafcd88", "sighting_of_ref": "indicator--820fadb1-f2e6-43f4-91ae-7b4cc93b833e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d2d432-5d62-457c-836e-36754d104d78", "sighting_of_ref": "indicator--e5bde192-7ea9-4def-8e46-187c02306858", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d498ae-2059-4206-a597-e77a933ded76", "sighting_of_ref": "indicator--cdaa4e7e-b3a2-44f9-b03f-5e7077174564", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3f8d67-b148-4a44-9329-d9032e5943de", "sighting_of_ref": "indicator--aa483c8f-1991-442e-9389-ee17805299c9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6df06ce-8558-400d-b91f-6ee172d56287", "sighting_of_ref": "indicator--ee621313-cf26-415a-bc7a-ce0bc2eadb7a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb4410a-d3d8-4a81-9d5e-2ad30a26c71c", "sighting_of_ref": "indicator--0659fd1c-f075-41ea-b8cf-479a302764df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a126500a-00d3-43b5-ac4d-81077a3d1014", "sighting_of_ref": "indicator--554ca3b9-02f5-4b91-aa65-1f730754144b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487eaba7-87fb-4efa-97fb-6b95bd098e28", "sighting_of_ref": "indicator--4e22a19d-63da-4ade-8b7f-e0e9d409180d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc2742-7c96-4caa-9644-5255df4608c0", "sighting_of_ref": "indicator--193896fe-5f8a-48c0-bce4-09fe430dd72c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f6c30a-fcde-42a9-9154-8478f58d9552", "sighting_of_ref": "indicator--4deb7338-36e6-44dd-becc-bb258efc0a47", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e44f66-d6f1-43db-839e-70916b9099be", "sighting_of_ref": "indicator--799574f6-32f6-4ab5-8b2c-8f6a7ba836f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce03231-0f2f-41f9-8f15-0f8549bb40af", "sighting_of_ref": "indicator--e144b78f-40a2-4129-9214-89ba3cba01db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bd9a26-5104-4215-b930-3057e61bb728", "sighting_of_ref": "indicator--6d72fb3d-aa8a-4329-8997-b124e134b330", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f40b87-cbdf-4f78-a8e6-497816a09ac9", "sighting_of_ref": "indicator--51a3e75c-4771-432b-be88-bbcd1f4ef6d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55eb330-eec5-47cf-ab7d-95450c7bcf6f", "sighting_of_ref": "indicator--43423a75-dd5e-49f4-ac50-552ff99384fb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b016543-818f-4c34-80f6-fd8f2ac40f29", "sighting_of_ref": "indicator--a2265619-82a2-4e61-b6d9-332e95668752", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73feed7-ce95-4d19-a4bb-2a90cc70033a", "sighting_of_ref": "indicator--656aa6f6-47ae-4802-97fb-cce43dcccc12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfec3ed9-861c-4461-abfa-040e0122d2d5", "sighting_of_ref": "indicator--36a808bb-a29c-4352-8a6e-7858c7beb0df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df8f1b0-4a53-4afe-89b3-1e79fcdf4bf9", "sighting_of_ref": "indicator--75d28121-a77d-4534-9a64-51e58290de4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e55c52-be35-4ab2-a44f-9bd168d8a5a8", "sighting_of_ref": "indicator--f5b8b9ed-ba22-4fba-a3bd-5d800df83818", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6219135b-a44e-4891-9e1d-ebcb02651973", "sighting_of_ref": "indicator--b7581725-5032-4fcd-8afe-29d9dd34f6f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff9b8c7-2803-4a82-8b05-d62c4638d5c6", "sighting_of_ref": "indicator--d992df0c-a93f-4405-b059-c147e4359bfe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a363f8-00a6-4d54-9404-8f2439d9a950", "sighting_of_ref": "indicator--aebe04a4-06fb-4efd-9cd5-617a92ffc940", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90120975-96cf-4b10-bd6a-d3979ad5baaa", "sighting_of_ref": "indicator--37383bf0-57f7-4602-8b91-475590d759a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ca86be-a9da-466f-ab74-be5cbb7be981", "sighting_of_ref": "indicator--43229ae2-c625-4856-8bad-3430a497e89c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5794d878-4a67-4ff6-b753-6e5726517599", "sighting_of_ref": "indicator--d1a01c91-82d2-49c9-9465-0013fd145e4f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a73bdbd-4677-44e6-adf3-97ff48fc0e3f", "sighting_of_ref": "indicator--e1e66ddb-f89d-4003-9394-336305be7410", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c37fff-93fd-48e6-b5f9-386cdc593241", "sighting_of_ref": "indicator--201664e4-79bf-4124-80ac-e261cfae7104", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b767a2-598f-4062-b81f-fb30067e88d4", "sighting_of_ref": "indicator--4a350d94-4b4f-4c1f-b243-5790ff8448ee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a95b079-0e00-4ac4-ad18-d30b292efa87", "sighting_of_ref": "indicator--42cbffa1-2123-4f05-952d-40d5cf22dd2f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2b57ad-6280-42a5-93c7-19fbde5fd48f", "sighting_of_ref": "indicator--0f893fb1-cacf-414f-9c8f-2e45cd9d12b0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ba74a6-7aa6-4906-90b7-5f8af549c6bf", "sighting_of_ref": "indicator--af5e50ac-9ef8-41a7-9135-bbc3f37f4ab2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65a3683-9051-4066-900d-8e7b40f892ab", "sighting_of_ref": "indicator--508f53ed-e3bc-46cc-82a1-adb851b80f16", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40032a4b-6581-4649-b94e-e97d85609d1a", "sighting_of_ref": "indicator--b444de24-fdbf-4b30-b076-8313af59e20a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7db7cb3-678c-4d4f-a43d-5c3de43e1389", "sighting_of_ref": "indicator--ac0f1a18-a9e3-447a-820b-78099436c708", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402d9235-5871-41b5-9004-a08842d95cd1", "sighting_of_ref": "indicator--c5a29899-a7b7-4bb5-991d-ea44ab9ab2a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350549db-59be-4eea-842b-401a5d410f9b", "sighting_of_ref": "indicator--f88aa1cc-dd85-4332-9b79-ffaec6696a48", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed82cfce-46f0-44c5-adf8-d55dd1c5d00b", "sighting_of_ref": "indicator--eea37d03-3af8-4d81-8c48-40625df7971d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d931894d-395e-4f2a-9f27-80f7e2d0bdcf", "sighting_of_ref": "indicator--9b516e0a-94ec-4e01-acd8-88f0f98ad1c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1caa295-c449-4c02-8c9b-2df9281ad700", "sighting_of_ref": "indicator--8794e536-491c-4f7e-a4a6-f62ce71c4891", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41db9cf-f9cc-4686-8d91-e6866a50cbbb", "sighting_of_ref": "indicator--2ffd953e-1eaa-44d7-bbb9-d7966a48acdd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7264ff8-147c-42e5-9959-bdf457800e08", "sighting_of_ref": "indicator--1dd7e166-4060-43b5-a523-8af2359eb2c3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dfc00c-c47c-4618-ae9f-dc9c89c3bd49", "sighting_of_ref": "indicator--cd1b6ef9-ccb6-4ca5-a862-efbf7b39f1ed", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67a7057-1a94-49cb-9407-58f7797ba6fd", "sighting_of_ref": "indicator--804bc51e-ccd9-4500-a420-1ef9de5085a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cc8a15-1946-4061-9038-71dd5efaa11d", "sighting_of_ref": "indicator--117fecf5-b390-4eb0-8340-2e86123a7304", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e741d6b-ae0c-4b5a-b87b-f139e1bf9338", "sighting_of_ref": "indicator--19237357-9ce2-47b4-87f4-5fcafb65e773", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961c832b-2d65-4a23-a2c6-ace313086ad5", "sighting_of_ref": "indicator--214d350e-cd48-4a39-9719-4a9dffd90f16", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349dd06e-96d0-4bcb-aa75-00c26d7e0667", "sighting_of_ref": "indicator--ea089dcd-e1fb-488d-99c1-c9346f5be57e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b733d21a-d413-4691-9c16-3048291c8f3d", "sighting_of_ref": "indicator--9d5f2c34-3207-4db8-ae3d-e82740e9227e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0746d2de-c5fb-4541-a7e1-0b766e38142f", "sighting_of_ref": "indicator--c755e96f-9565-4544-a149-060971212f8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba879ac-f971-4bff-a6fc-12afcb6be579", "sighting_of_ref": "indicator--f5b14ae5-0c28-415c-aef9-1fbeb93b5991", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b1b8db-22c4-4fd1-98fe-bf97301a0ab5", "sighting_of_ref": "indicator--81e1ac89-0afa-4a2f-8b7a-2e65e70dc27e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a543c57e-28d3-4624-bf4f-aa45f626ee5a", "sighting_of_ref": "indicator--33d3762a-8947-4df0-965b-06cf077ecaa0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e426681e-1368-4260-82ab-a10cc45090b8", "sighting_of_ref": "indicator--f9cd7d0b-19dc-466f-9d62-1ad86403425d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b59964-65be-4baf-949e-18f73061e477", "sighting_of_ref": "indicator--47f0b08a-d053-43f1-ae34-a5fbb6cf8e6b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa0a983-33db-4626-af3f-6308fe016dc4", "sighting_of_ref": "indicator--9e88df7a-20d2-4765-9f3b-521be6061c18", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9972691-213a-4694-8231-2a6df966e94f", "sighting_of_ref": "indicator--4a10739e-12e5-4d19-b1d3-2347f7a145bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e7ea5d-885a-485d-8cbe-f6fde8e79e16", "sighting_of_ref": "indicator--87b4cb5c-e90d-44d3-ad47-4d0433cd9b6b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050aa276-e54e-4b3c-a027-2b71a17541d2", "sighting_of_ref": "indicator--58e37b6e-ec0d-4349-b53a-ba24203e126f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f4e068-8f8e-4e8c-a18d-353710acee35", "sighting_of_ref": "indicator--5ec92fe4-68c8-43d5-9328-7994f63d878a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224b612c-b5b3-4322-9f71-f8c44c3a3b4e", "sighting_of_ref": "indicator--f44ec95c-b799-460f-b125-bacf0b63e4cb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e934a0ad-b201-448f-af62-c3c10fe8578f", "sighting_of_ref": "indicator--2b977138-5685-434e-9a54-f80b3d36ebf4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b422d4-187c-47af-a088-b5f5215a378a", "sighting_of_ref": "indicator--4f20efdf-f5d5-472b-a71f-9179f54556be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0486f24-6b31-4058-b814-eafee7909853", "sighting_of_ref": "indicator--7b729872-9222-4483-94b8-825d8a3b9b17", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03e2f03-e0ce-49cf-83e2-4af6dd26c45b", "sighting_of_ref": "indicator--f7b26700-eae7-408b-ae34-72a5d2b2dcd2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece6f6b9-964c-48c8-b3b2-5cabc9842602", "sighting_of_ref": "indicator--10947f14-a09d-4183-b266-db194031782d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4db0772-8c75-4043-bf44-e467de27b247", "sighting_of_ref": "indicator--87e11052-f80f-4974-909c-a2936f595d3f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e93420-18b9-47df-becb-1aae71e5e640", "sighting_of_ref": "indicator--9788b642-87fe-4da1-a3b0-9521ee55cbee", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2529b2cd-4194-4beb-8603-46f751c33b8c", "sighting_of_ref": "indicator--e94a005e-9c0e-48dc-b735-2b72a8627c09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db4ff6b-5123-44b4-8712-5f1f21b96629", "sighting_of_ref": "indicator--ec3194ea-dcbe-440d-a8b7-f9cf99c773d5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d125a2-a9b3-4e27-a623-db89e0062ce4", "sighting_of_ref": "indicator--4bb1c410-94cd-4ecd-8ec5-ae785df87eb6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bb877b-2ff6-4b2e-9dcb-f13adc976aea", "sighting_of_ref": "indicator--d8eb59a8-1fe5-452f-9f68-937dc857cc1a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35186d5f-5ef6-4961-9a77-742ce5faab72", "sighting_of_ref": "indicator--acc71924-bd9f-4433-806e-28bfdc615746", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045bd134-2614-4ee5-82aa-4e5e62464a0d", "sighting_of_ref": "indicator--d6db239b-75a4-4d94-850a-5e24a9ffa2b9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fff268-0c6c-44bc-9a61-1d9f6dedc2ea", "sighting_of_ref": "indicator--4ee1d7ca-32c8-47e3-9c61-e63a5ff96538", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3f264b-518e-45ca-a113-d839557bca0d", "sighting_of_ref": "indicator--6afcfc46-239b-4f69-a5f4-2972d4490af4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3efd83e-99ce-42d1-beff-08022497194d", "sighting_of_ref": "indicator--2b998d77-b1ed-4b32-a776-1a8e7f11d52a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b83187-cfff-4279-8b3b-925b677baf28", "sighting_of_ref": "indicator--a2b0543b-4553-4b67-8230-4a7b2c80001b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30322d7a-ca50-4d4f-bbf9-faf5d5c7969e", "sighting_of_ref": "indicator--b9c393d4-5e5a-4f58-aac7-7175d47a4a05", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a403f3-63b5-419c-8044-e2dacc875dbe", "sighting_of_ref": "indicator--2450b3d5-52af-46d8-8ea9-7bc8dd059916", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa8bd78-1304-45fe-a3aa-813457e922ed", "sighting_of_ref": "indicator--98fb8458-946f-414f-814d-1f244ca02df7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caa5d28-abf4-4bf9-acce-4d9ee338b272", "sighting_of_ref": "indicator--48031706-247b-4144-a4fa-bc9ceaad3007", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae761ff8-832f-4163-98ca-54a7cd6e15ac", "sighting_of_ref": "indicator--23b45fd3-e889-4213-8215-512132b3e8e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0563226-87fc-4e90-b41d-c65f37c54352", "sighting_of_ref": "indicator--8ef115c7-2610-486a-b1f8-1df7081ef221", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5189981-9c7c-42c1-a715-f72d3841b6b1", "sighting_of_ref": "indicator--9e48b675-2a9b-45c2-92d6-d8a57fc00a62", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecf6a30-fdb3-40a0-bd69-b77c4357449a", "sighting_of_ref": "indicator--41d9d148-84d7-4c91-b7c1-cc3bc7840d04", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c1ee64-fe4b-4eb5-b971-94ca15cfc072", "sighting_of_ref": "indicator--e612f0ac-656d-4694-b9b9-a9f7dddab0a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15894eb8-404a-4519-b922-fb9452b3cbd3", "sighting_of_ref": "indicator--6793beac-292f-40f3-b9b8-1326f04e1d19", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519bd364-5b35-420d-acce-35e82619338d", "sighting_of_ref": "indicator--3215ab30-3629-4f46-91b4-d74d99a34810", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70519dab-05a8-4b29-8973-8bc4b1d35dd4", "sighting_of_ref": "indicator--159a2d35-7f79-4032-8207-d84a0a2dc466", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f3e735-9027-4800-8e84-dca797bc4b50", "sighting_of_ref": "indicator--76484cbc-0755-4b23-b012-90df96405242", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3222f2d-d5b5-4d72-a8e8-5763a23dd54f", "sighting_of_ref": "indicator--54754e41-bb54-413e-9907-fd7b6bca1346", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7cfa2c-4fea-47e2-b21f-e92d75ee84b2", "sighting_of_ref": "indicator--d4424a60-d516-4696-be51-742dffcc8ee4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadbc01a-1b35-4267-bbe9-349368bf55ac", "sighting_of_ref": "indicator--396586e9-c158-4a2f-9135-9eec77a932a4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c1ce50-9f12-438e-bc55-0404d802177e", "sighting_of_ref": "indicator--e64e7d2f-ba8d-4ad5-aa1c-b39ff5f1c58a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94900a75-4253-40c3-b994-bf4964748242", "sighting_of_ref": "indicator--bdbb0a59-f161-4ad5-99d1-e81fbc69adb3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6d61e0-2876-4afe-bd9b-0eba5c7fac67", "sighting_of_ref": "indicator--6c454dbd-1549-46c6-8c28-37e7b23155d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f33b4c-d66f-4b9e-9741-f855b7825660", "sighting_of_ref": "indicator--1b79b939-3063-4ae3-84c6-045349903a6c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa4f179-e5cf-4195-a545-03f3562943a5", "sighting_of_ref": "indicator--0a2162ce-ab12-44c8-b722-e80cf0737bb7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a820e6d6-513b-4e8b-83e8-a5bc2316f8e2", "sighting_of_ref": "indicator--cb814ae5-d1a6-46eb-857b-8a2600f598bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4937bca7-bc42-449d-8eea-592455c3b4de", "sighting_of_ref": "indicator--b6a54169-21c6-4081-a1fa-6bbdef2c16fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ff841b-706d-42b3-8bf3-27bf931977a7", "sighting_of_ref": "indicator--8ff5e28e-e2d6-4653-8d75-a817d7fe9981", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f71e1-d75b-49d7-beef-21dfbd6fd951", "sighting_of_ref": "indicator--b71b32f1-33e3-4f77-ac11-5217bfe6ba09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de8aa9-0031-42c1-9ac2-8df315a00379", "sighting_of_ref": "indicator--dda4f5fd-200e-4e94-b6ee-53e35c5bc9df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c0b5c2-3ccf-4fed-9ad7-1863598f7775", "sighting_of_ref": "indicator--243dbeff-b53e-43dc-950f-e724fc76e0f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985361f9-162e-4210-bdfd-886dec719ab8", "sighting_of_ref": "indicator--ac247572-a79a-4306-8fb9-db5a97935e02", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb079397-2d4b-4908-8a60-2b25335da69a", "sighting_of_ref": "indicator--e7a1b986-0445-4f75-967e-57a90f66a859", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82c1284-3a3f-40f9-a910-2e0d5e42541c", "sighting_of_ref": "indicator--49ce6ff6-2168-4cde-bce4-af8c5d3e16cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd6b4e1-dec6-4913-9bcc-b4b0b1d875ee", "sighting_of_ref": "indicator--2c24e076-5748-4770-8655-d20362623ff0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f50d99-730b-4580-ab38-65c87a434601", "sighting_of_ref": "indicator--f5908d7b-26ad-473f-b629-f2dc5dfc099a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920fb167-1952-4b66-8003-8e8776e4cde9", "sighting_of_ref": "indicator--5ce029b7-b96c-4488-9d9c-8824f89c6a32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b774ace-5504-45fa-b24a-1898a53e87b8", "sighting_of_ref": "indicator--f60581e9-833f-4cab-8762-785c2c67d3b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfc85ee-ed23-4f85-97d7-68dd252d2a54", "sighting_of_ref": "indicator--131fb432-0bd2-4a86-a1ab-6fccf8d4f19f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d4ecd3-6677-4b76-becc-aa444d1085be", "sighting_of_ref": "indicator--eea0cd50-765e-4fc2-8e64-f8247daed1ac", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3d91ca-5f9f-4483-a57f-82bfcab807a5", "sighting_of_ref": "indicator--ef1dbb5a-9508-4ee6-ac57-6bc4fda0b4a0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4270ca4-6d45-435b-b8f5-a55cc5157ee8", "sighting_of_ref": "indicator--15122dfe-883f-4808-b838-49b4446015d0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf12322e-d1f6-4396-bda8-3dbfe724a4b7", "sighting_of_ref": "indicator--981589cb-900e-492b-a15c-e465f033513e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6d15d8-7f44-4541-b916-c4e0babf3fa7", "sighting_of_ref": "indicator--301f7994-6fb5-4527-9405-79ba58db8001", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d07495c-9aea-4c16-845e-74cc12edee9d", "sighting_of_ref": "indicator--0c8b4777-6482-4ab1-b878-f13013a5259d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7aaaf9-6f66-4c3c-87d6-374cd7187b44", "sighting_of_ref": "indicator--49151fe2-16b1-42aa-90c1-4a93dacf80ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83b5102-ba9b-4f0c-9dfd-7b9783f2d195", "sighting_of_ref": "indicator--b0bb3398-3bdb-4982-94c0-9d7522fce866", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ca9435-c6d1-42fe-afd7-15d0a8020066", "sighting_of_ref": "indicator--4dc5a5a5-3972-48be-83f1-c2c7d9d194d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e609f5-e650-4066-a024-360a79b6bb67", "sighting_of_ref": "indicator--891d85b1-13d5-4b12-a44a-d7333098b795", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77c9bc2-68a2-42ad-9976-c9352a8b831a", "sighting_of_ref": "indicator--0f5803d7-f047-47fe-a0d7-c63947f1d9ab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586fe66c-6787-4d6d-b2cb-5ac20de852d1", "sighting_of_ref": "indicator--c1083b34-c26f-489c-bc80-6e5119a1a89a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def938d7-cbf4-4bac-ba28-d4421ab3ea8e", "sighting_of_ref": "indicator--0dcc584f-a86d-49e6-8c04-d66136b6a492", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a12f810-c632-415b-80ac-1981fe912801", "sighting_of_ref": "indicator--daf15cc7-6640-4f54-b1f9-d8cac29da7eb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9455c328-7d82-433c-85f6-14477df86467", "sighting_of_ref": "indicator--0435c2de-52e3-4f33-90ea-7e902aacfd50", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275112cc-6abe-44ff-b212-60261d1723d8", "sighting_of_ref": "indicator--793b9cfd-b84a-450a-94f7-a9f4dc1b2a9d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612c0750-f9da-4dcc-8ed9-70133ab744f8", "sighting_of_ref": "indicator--ae9cf376-9063-471b-b3a9-31c9ddd99744", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1237822a-d317-4010-8051-185de393a747", "sighting_of_ref": "indicator--c6c12adb-1ca8-4b3f-92f6-809a4668fd0d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe3371e-6e0b-43f9-81c1-613b5a73b8ae", "sighting_of_ref": "indicator--60eddbb6-1426-4b4d-a549-cd9a39d9fc61", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f83d04-a6cc-4059-a321-ccb4f6abbc4f", "sighting_of_ref": "indicator--2a3a6cd3-2700-4115-8170-2e0510bc1475", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4806f5-f863-413b-b0fc-769d0b05835c", "sighting_of_ref": "indicator--78ae09ce-b1cb-47f7-a4f6-1f9f4b397079", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42a9ce0-deab-43dd-8040-663aa9a8842b", "sighting_of_ref": "indicator--7ebef55c-7499-490d-a37d-24f35255c037", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f356d6-0795-46f3-b329-9f19e92bb60a", "sighting_of_ref": "indicator--7ddc3dda-73c2-446b-b1e6-82b78e2ecc90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6c17a8-290f-406a-b28c-f320e52a911b", "sighting_of_ref": "indicator--413f5fbd-05fe-4eff-9f5e-94630e10fe99", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827b2aef-8e51-47ae-b08b-04b58d808743", "sighting_of_ref": "indicator--7577bf32-348a-4b51-ae91-f883c043f484", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cedeb5-7528-4f9d-be8c-0812cc818325", "sighting_of_ref": "indicator--15283cd0-3593-4826-a530-a6006342ecaf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b29ace1-5601-4be9-9d86-56f6ee0a5b6a", "sighting_of_ref": "indicator--9aacb883-d6c5-487c-8e4d-47acb19fa0f8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fe8bac-4d3b-4900-b65a-9fbd0abcb72f", "sighting_of_ref": "indicator--956b9c9a-b412-47ad-8496-b8abd59d0996", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91a9b18-c016-4d28-97a3-b986820bffc4", "sighting_of_ref": "indicator--40c5a0c8-e602-4976-b95d-86e8692885ba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdbc438-9e77-4596-ba90-38e78a703016", "sighting_of_ref": "indicator--7ccd296b-2ec5-4768-b65f-45848f32dedc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3de32cf-0e61-46e0-a47b-0cdaa6cb9229", "sighting_of_ref": "indicator--ebc91ca5-4144-472f-b37c-e2e1a4bc05d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c58193-63d0-4def-8399-b08f2207e642", "sighting_of_ref": "indicator--ef84424a-efe5-466b-8e4f-01e83be52708", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b146e46-8a86-495b-9a9f-8f22a6bd35e3", "sighting_of_ref": "indicator--2cd53278-0b37-4dbf-a521-381ee893bf47", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba2577b-5507-4e0f-a6d0-ef350d670ae8", "sighting_of_ref": "indicator--f6f0a18b-ba9a-4521-830e-6f551a4ce544", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d69ea9e-2436-4186-b353-eeb15c8fd480", "sighting_of_ref": "indicator--c2b603dc-fad7-4496-940d-d90fc495feab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917cb22e-ec3f-4461-802e-8bc69be98869", "sighting_of_ref": "indicator--4aec59bd-91df-4ece-8720-c3eb0456105b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1de5de-d4e3-481e-951d-723dcf2cc89c", "sighting_of_ref": "indicator--37c34b11-f3db-408b-bb36-d574c31df4ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd0b4e9-ef87-4132-af88-8d8b69109537", "sighting_of_ref": "indicator--37c34b11-f3db-408b-bb36-d574c31df4ad", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9da2d5-7053-49f7-a619-0809f75e40a0", "sighting_of_ref": "indicator--7c2f10e5-5def-41ce-a9ff-dff5460bb61d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b41643-bd3a-4c04-a2b9-9c0a7e218b73", "sighting_of_ref": "indicator--dd8de1f6-c564-41d2-96f1-191f2ca70b04", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8f9864-8b0e-447c-9cfc-89f7164f6f6a", "sighting_of_ref": "indicator--1c0750e9-116e-4a99-bef4-d063c76c84c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d9ca4d-6db0-4b3b-a98e-c3e23907bbbf", "sighting_of_ref": "indicator--93638b9b-addc-44ba-98fc-90474292d1e5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b14dd1c-3f4b-438b-8942-441051c492be", "sighting_of_ref": "indicator--592921ad-070f-4fcc-b811-6b0be112b702", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae862252-b01d-457e-afe7-12afccbd4e10", "sighting_of_ref": "indicator--cb192e43-41b2-45b1-8de8-d228f9bd7d1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9d9711-70a7-4e99-88ab-5f00f5fccac2", "sighting_of_ref": "indicator--c4269c06-0202-4f20-abe0-15e98204c32f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cddcb3-5cee-48b0-964f-e88ad05ffc3d", "sighting_of_ref": "indicator--226e305b-4432-4636-99bd-a5e125d08138", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cdf06c-8a37-43c2-8c43-b41c2e5ae456", "sighting_of_ref": "indicator--b851ca46-6aaa-4c51-82cc-774a8762face", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb57a7-eeab-4b9a-a816-7bfe527cb99d", "sighting_of_ref": "indicator--0baf79f5-be68-46ed-94c9-6781016b7ee9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9179f26c-1194-4763-a329-9de7af1708bd", "sighting_of_ref": "indicator--fdd1825e-e0fb-48d6-ad39-99fae500beb3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e044781-414e-43af-9dbb-64ccbf1e1b85", "sighting_of_ref": "indicator--64c3599f-ce62-481c-9bf1-c081f2f89640", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcee049a-9358-4aaa-87b8-439a1db14361", "sighting_of_ref": "indicator--451751d5-e159-404c-b923-0077075daaba", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcece8b-effe-4777-af4f-40f19d562b47", "sighting_of_ref": "indicator--537ae903-84f0-48fd-a582-fc7da567af79", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffef81c-6bec-433f-9766-65275ef2e354", "sighting_of_ref": "indicator--96b53f2b-f0f3-4ef6-90b9-9ddf92095050", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305af127-7f76-4f0a-a38a-184555472177", "sighting_of_ref": "indicator--0f2dd409-3bdc-4897-84be-8610b10cec8d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b46e07-31b4-4738-b800-e7f01f4e3d01", "sighting_of_ref": "indicator--92667dd0-b367-413d-9909-0c8997472882", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc3ce2-de48-49b0-bfb6-63e1f1a48bdf", "sighting_of_ref": "indicator--1895beb3-810f-49ef-a8a9-9ba85496a077", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35488260-6d30-44e1-95bf-707554385cdc", "sighting_of_ref": "indicator--696a68c0-88e1-475e-a2e8-d6d86d466023", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a5bfde-8907-4be6-824c-5c9dee1749bf", "sighting_of_ref": "indicator--cb83fd4c-626b-48bf-a0c8-02b50fb0584f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f578e895-e241-4295-9df2-dc8e05707f1d", "sighting_of_ref": "indicator--55a192d9-c906-4db8-ac46-6a5695a9d2d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e41797f-e85c-47bc-842e-2ef54261b62b", "sighting_of_ref": "indicator--35ebedd3-076a-4165-ba77-bf5c9f7d730e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46b3ac6-4300-45f2-82fd-03baf6e9aaeb", "sighting_of_ref": "indicator--0a189412-976c-4478-8599-1b4c1513a0f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e7636-6b9d-454f-a1d5-2bb49086f862", "sighting_of_ref": "indicator--2a5700a4-5500-410d-8a3a-f5e7e4b6db20", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37309370-8dad-4c33-9fd6-940ec6a01055", "sighting_of_ref": "indicator--849404b8-0995-4196-b7b2-3075269e21e3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08508a0a-0fdf-4257-b50c-a02c31c437fa", "sighting_of_ref": "indicator--deb163c5-2faf-45a2-b6b3-b87f13a15b33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0815615-e729-4644-8411-9d30b80b2a60", "sighting_of_ref": "indicator--18a61fbb-0007-4bf4-9ee3-06f5b43fd540", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da829273-fe86-4923-99d5-c1c23992af02", "sighting_of_ref": "indicator--3a1ff019-5309-4771-b0c2-87ed7c7077b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abc0efe-ca27-49a8-bd49-6f2a37eecea9", "sighting_of_ref": "indicator--843ef37f-94be-4ab4-8497-29110febecc3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349ef6da-1030-42a4-bf4a-2e81e2f1fe4f", "sighting_of_ref": "indicator--f41d2638-33f4-42e5-bd80-c9edafa79365", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cb1837-c5e3-487d-b840-75ecc61ab772", "sighting_of_ref": "indicator--bc706336-51b2-4a32-958c-03d6147031f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1015159-9247-4c3d-9261-0f7202eb57eb", "sighting_of_ref": "indicator--2d743de6-6fc3-4815-843a-810a77120f97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b313fb-aba0-4b21-af03-7e2f05427256", "sighting_of_ref": "indicator--bc23e60b-9d29-4aab-8ed5-6d7cea7a7578", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2875c295-a92c-4fd7-b717-909003c9b49e", "sighting_of_ref": "indicator--9221b9a7-8e36-45b3-b13f-33ebaf78b748", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d8b88f-6571-49d5-a1f7-278136f1604f", "sighting_of_ref": "indicator--c2360eba-7ad9-4933-afbd-00bf7081d0a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52742206-8aaf-4ea8-b0f5-08dbb1960dd3", "sighting_of_ref": "indicator--8a9d9f52-3689-41a2-9184-83d283c27198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbc9ffa-3fac-45e6-bc4b-33a461ce75d7", "sighting_of_ref": "indicator--5a8af452-cf74-4e16-b87d-eea88ae6b5ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c831f2c-da34-4eeb-8420-4949e1d8d615", "sighting_of_ref": "indicator--57450c7e-903a-42cb-9932-ddce925e5bad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44519f44-a29f-4542-b758-07eb4fb17cb2", "sighting_of_ref": "indicator--8ef1dabc-4d6b-4b60-a435-ca0c8d2ec97f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9108aa82-5b8a-4eee-8ec2-27e1d7f3512e", "sighting_of_ref": "indicator--50bc6d42-912b-4f5f-8a05-e6095cf6046d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd146a-9259-45f2-b406-903ad573538c", "sighting_of_ref": "indicator--e1c732f8-031c-43a2-9a51-3b224f8b0a50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131377d3-d96f-4348-a7f7-d1518fcd7a3a", "sighting_of_ref": "indicator--0fb1e7df-ac3c-41e0-ba82-ef8a033a4203", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4de4225-d0f1-4768-89eb-fb59628ac1d4", "sighting_of_ref": "indicator--568860d2-e055-4fe7-abee-bebd8ae52e27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dcd173-0028-41a6-ab3b-5224e14af00e", "sighting_of_ref": "indicator--5b3e1827-eef3-4299-936f-dea3309e7d4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed03272-a5ad-4a7d-9c66-3b3511b70afb", "sighting_of_ref": "indicator--9eb6fa79-3106-4c34-996a-002abc695843", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa302cc-42af-488d-87ca-77aef6d1f296", "sighting_of_ref": "indicator--c825c266-0f14-4f9a-a567-b33427b0bce0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbeaa8d-fa1e-4d7e-b981-bfc57a37b501", "sighting_of_ref": "indicator--eae79ddd-dda9-4a3c-a11c-6a576810ae34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16766379-d102-4975-b711-d794fc640e06", "sighting_of_ref": "indicator--3debc852-f37a-4124-b130-a5bbcfb4d7be", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4423feb2-a6b6-4edd-bb1b-64be4b1f8f90", "sighting_of_ref": "indicator--a09c0e0d-7773-4056-bb34-4183369ef6df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac8a02e-573d-42db-b794-e50cc0f35618", "sighting_of_ref": "indicator--03b90b97-c776-438b-a9cc-04bf9dee884d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0176a45-dcf0-40ea-a0a5-6d08327da6a5", "sighting_of_ref": "indicator--a23a8f89-99de-4dd3-9076-6274cb0cade6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a14a525-751c-424a-82b9-a1581201a9d9", "sighting_of_ref": "indicator--5d37abec-5021-4e26-85c1-db8b66c4f293", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa368ac8-554d-400d-a38e-b27722d79345", "sighting_of_ref": "indicator--f3177d98-f3f0-45cf-81d6-932dae2da09b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969e12f2-2f2c-4dcb-a190-596ad3f58c5b", "sighting_of_ref": "indicator--d8882b4f-f5bb-4200-aa6b-c45f508dd3ce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67f3120-ff0f-480c-9e63-7b9453d070a7", "sighting_of_ref": "indicator--3e3c5f11-aa75-461e-86e6-bb33c980fd22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe6c6cf-f6fb-4914-a5fd-85d565ea6049", "sighting_of_ref": "indicator--86c4dafd-b27a-4f8b-8fd8-7a4902ea7e7d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed6e6c7-b577-46d7-8a0a-0d3454b89d9f", "sighting_of_ref": "indicator--61df291f-c6eb-40e1-95de-f140164c2d6a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41823dea-1141-4d56-bb86-8603ccbb2fca", "sighting_of_ref": "indicator--43d7d22e-b7d0-4dce-8f71-7465a40052d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca27aac-ac73-4db5-9579-dbeaed864bb4", "sighting_of_ref": "indicator--3c8b69ef-06d8-48cf-aff4-3f34fbfff31e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da24df2e-5e08-44b3-be80-ec56c2ca872e", "sighting_of_ref": "indicator--93d1556f-9a87-493a-86cf-b00b547bba17", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8327ab-d80a-46de-b6d0-2083d4e44580", "sighting_of_ref": "indicator--52ad87b8-708a-4be6-ba8b-8f529c6a3a71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e53890-78fb-4979-9f59-681c97924dcb", "sighting_of_ref": "indicator--85ec9ead-c3cd-44ad-902d-cebe9899cab6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6afac62-a87f-430c-b40c-d4c30c123157", "sighting_of_ref": "indicator--9b527620-168e-4092-ab69-89e8808a37db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31391de-0829-4936-8aaf-6e9d3c816ded", "sighting_of_ref": "indicator--4ea429cd-0521-4130-91f1-b7d183df0d9f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82743f6a-24ae-4b92-b80c-2354cfc39765", "sighting_of_ref": "indicator--0e588402-c895-4e3f-a0c1-bfd099e4d3b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a887d98-6e84-428b-8208-476de2f26441", "sighting_of_ref": "indicator--c530cda0-df98-426f-9d0f-1a3da2fbc875", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5227a890-da31-4d68-a41e-cd53cc05ae5c", "sighting_of_ref": "indicator--3cd9fc33-83ed-42b3-9433-e3386d9a93b0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba69b102-bae4-4075-95eb-42340cb78fee", "sighting_of_ref": "indicator--1e3b3094-fc1a-4aa6-a0f2-15dd0ac4c529", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93341f4-ef89-455d-8562-dc0e9196f45c", "sighting_of_ref": "indicator--7ba30148-54cc-455f-b599-bec282b7ad1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb90d83-f3a7-4998-898a-df17e810963f", "sighting_of_ref": "indicator--62f6f837-6855-40e4-b3c2-5532d4b50803", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e0eecb-66d0-453e-9780-8bcacd219153", "sighting_of_ref": "indicator--c03f9b69-aca4-48ae-8c42-e83880979606", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae43aae-5fe0-47ce-a958-db6899bad21c", "sighting_of_ref": "indicator--3a63a808-b03a-4163-a597-e67e90c62aaf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f53378c-7fa3-412e-b218-0e070c2e2e23", "sighting_of_ref": "indicator--893ece8c-ff2c-4cf9-a756-8a547be3aad8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8813d2a3-a246-4dc3-a6bb-80557631a688", "sighting_of_ref": "indicator--2e0a2fe9-cf7e-4aac-9b7f-1e2d0d2dc784", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f12990-6729-452e-a904-770cfd079eaa", "sighting_of_ref": "indicator--4b386461-a7fe-41a7-8bca-3efef7a6094e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ecb535-b0a4-4b2c-a1ba-bfd6d3ad5c11", "sighting_of_ref": "indicator--07d5e495-e7e3-43ea-aa16-3527f1a65126", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1560e252-2c4c-49ad-baf8-2fffbebc11e4", "sighting_of_ref": "indicator--1f85d926-caca-4741-8e37-205845b292d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0f1847-49e8-464f-ade2-dcba82cae56d", "sighting_of_ref": "indicator--c469aa3a-78c8-4ec4-ace9-36b9c67aaf71", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e383835-540c-4e19-ae01-83b92250dfb3", "sighting_of_ref": "indicator--20b1641a-3d0a-4504-847a-ecb0f9ca4323", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d005613a-465d-43c4-905c-181157a0ea1a", "sighting_of_ref": "indicator--7774a69f-43ea-48ea-97cd-60e9d1893736", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a068dc86-2215-4512-adee-4bfbab724b5f", "sighting_of_ref": "indicator--8f5bf2c6-5d90-46fc-881f-11c279175244", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b4fad4-ee31-4a2e-9924-931655dfaa07", "sighting_of_ref": "indicator--18d41625-77ea-4d9a-ac7f-09e01386f096", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fbd1a6-d86f-492d-a970-61f6a30e8f7c", "sighting_of_ref": "indicator--93435427-30c5-46b2-95ad-50f6e82ff094", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8c8e66-e72e-49b8-9cfe-7c2fa34ae913", "sighting_of_ref": "indicator--458f1bde-ed32-4d90-b9d1-0f8c3c53de97", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6362bdd-5cd0-4431-8289-885955759d89", "sighting_of_ref": "indicator--c6bed8b2-1354-456b-aaa9-4b7e2efee114", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c3949f-9c83-424e-9f45-4f321edaa6cd", "sighting_of_ref": "indicator--eb0518ec-4d7d-4d60-8b51-3f9ca4a12c7e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9c5512-39c0-44d8-9552-41ee0668a3cf", "sighting_of_ref": "indicator--382df629-1c5f-4362-a762-266d7f848321", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ee107-5c69-41ad-890a-1832d03ec132", "sighting_of_ref": "indicator--a4685314-6637-43c3-8133-3fb65bc308c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a9d08e-04d8-43fd-b583-f6250922f7c5", "sighting_of_ref": "indicator--0d77c83f-422a-47c3-a7ca-2f29dbd97235", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee59262-0bfa-4d4d-a002-6a46d3757df8", "sighting_of_ref": "indicator--f2207de6-854d-4682-8ab1-c37fd38ba697", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b27d0e-5f86-4d74-85f3-932851f14101", "sighting_of_ref": "indicator--c1f89aca-6496-438e-bdf7-5ae6816d3c3b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7561d941-896e-44db-bd0b-39c839a3b1da", "sighting_of_ref": "indicator--dba2bac3-2441-402e-ab33-f0b17a38cc88", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09b9f2f-73c1-4971-a60e-c81a3ebfeeed", "sighting_of_ref": "indicator--a3ac9377-9b9a-4540-83c6-7a1762d7ce75", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d33160-91d8-4482-9311-17fe2255439b", "sighting_of_ref": "indicator--81dae09f-4a65-4c1b-b15a-c01b8fde145e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f2f4a1-dda1-4b9a-9325-04d22eac6268", "sighting_of_ref": "indicator--eafd643a-204d-405c-9477-b30ee035c45c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a74e83d-c077-43ec-9d27-9632c5879d53", "sighting_of_ref": "indicator--4c8f53ec-18fc-4325-ba9f-d28d653891fe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353395e7-1cd2-4dbc-b528-b4941e6140cf", "sighting_of_ref": "indicator--d23b26a6-950d-4606-a800-c6af731b7b8c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0882d2-8bdb-4d75-8618-b0854b961810", "sighting_of_ref": "indicator--8d98428b-23df-42ab-9e7d-9034af4a8c9e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f822730-0e8c-4d2c-9482-0aa32ea0a5f4", "sighting_of_ref": "indicator--786e3343-dae7-460f-961b-4e78fa30367e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1be21d-2463-4e76-96ff-a692e166da96", "sighting_of_ref": "indicator--97079f69-f9e8-4515-ae0b-101a3d680a11", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b420a7-1d59-4874-9ddc-f3c23456a87e", "sighting_of_ref": "indicator--e3688c93-8dca-4270-a3ab-8106ff0d3840", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96767344-5a12-4033-bf33-038d052f551b", "sighting_of_ref": "indicator--4a015e32-1000-4df9-b2e6-fe069b9b3c0f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0efe34-b07c-42dc-9f51-717308cfa806", "sighting_of_ref": "indicator--e5dfb39c-673c-4f4f-ad7c-749faf6e3418", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437cd2d8-e394-460f-9b24-714969f99d31", "sighting_of_ref": "indicator--c8c621e3-5463-4ace-ac85-889affee0e70", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756edfe6-d091-4753-9732-1224277ada46", "sighting_of_ref": "indicator--f01341b1-26f1-4986-90be-41fad9054225", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeded4ce-d0c4-4db8-9e55-5b0a4a1a5d9e", "sighting_of_ref": "indicator--3d73753b-8f67-4aaa-b30b-ba3281c5f44c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cbdf98-5675-4dcd-8fbc-3f96fbd520da", "sighting_of_ref": "indicator--c488e5fd-baa1-41d4-827c-8dd317239448", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a96153-7e8b-4a6b-b61b-9b89945c7b53", "sighting_of_ref": "indicator--0bebedb4-90b5-4d81-bed4-44896eacb057", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5e0849-1e19-42c4-801b-fcb67f077f77", "sighting_of_ref": "indicator--0636d981-57a7-4540-95aa-fd32a8049d44", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b27eb6-d81c-43b6-9f96-4703e216260f", "sighting_of_ref": "indicator--e00ffe59-99c4-4ce9-813e-99429cc616cf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5917c100-f2fa-405a-91e9-d3d8de40e5ef", "sighting_of_ref": "indicator--63f7f30b-accf-49ad-a16c-676f42333845", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1be4e3-0153-425f-9029-39b9bc25b462", "sighting_of_ref": "indicator--a32cb7c7-8f0d-48c4-8d24-945cb2ada3e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0ba69f-48a9-4bd3-b0cb-65ab1b955119", "sighting_of_ref": "indicator--4d4184da-11b7-4796-8fef-06217b8a2ade", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c311e473-882e-443b-a6d4-1e616b3120a8", "sighting_of_ref": "indicator--6fe0a8c1-8b56-4e75-9bcf-7c11a7ee35dc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e7881d-a9e0-4a0c-9699-b331f8b0cf74", "sighting_of_ref": "indicator--4252d512-0e7d-4551-901c-49d2687f0e4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3892880c-c048-4015-9085-98e90eb38c0f", "sighting_of_ref": "indicator--b44128a1-ddf7-498f-b527-149f3b2bc61b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4720b4-1b94-4b8c-ad07-54e8df1f0663", "sighting_of_ref": "indicator--5e34834b-0761-4166-a5bc-796f5550d85c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a003a535-bf69-4516-8cdd-ea7ddfc02e19", "sighting_of_ref": "indicator--9da321bd-d0fe-4bc7-8cb3-43618cf965f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6955c3bd-f0e1-4974-a368-d433121c5c2b", "sighting_of_ref": "indicator--dc2b9f7c-d7c5-4b97-9118-54aaecb31b06", "where_sighted_refs": ["location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3e0caf-558e-4136-ad3b-b8a77b6189a7", "sighting_of_ref": "indicator--d82d35ce-5185-424e-b707-45605196ec32", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeabd410-4204-4cfa-ba76-6fb11b06c887", "sighting_of_ref": "indicator--440359de-1042-40bd-bf86-e33df7476b0f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc089645-a09e-4633-894d-4355496dab7a", "sighting_of_ref": "indicator--57b69728-c64f-4bf8-9fe7-0d71807a4a41", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14a100d-bb07-4baf-9c8e-d0c780b95655", "sighting_of_ref": "indicator--17675751-8bfa-48f2-93a3-9bc42b001cab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd94965-f1c4-4185-a86d-f0fc8b438b9b", "sighting_of_ref": "indicator--c1169e6a-357b-41a2-a904-54e7a264c8f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee40354-7afe-4828-a88a-83ea864d050b", "sighting_of_ref": "indicator--5d2da656-8ad7-4607-8ae8-9dba2aafce10", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa4d1c4-880b-4bea-b0b4-0758133f039b", "sighting_of_ref": "indicator--709e864e-1e89-4ed8-b87e-ae219e3bbf42", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2186defc-4589-4d0c-9ecf-84fd18c3ebea", "sighting_of_ref": "indicator--01c9668f-1185-4465-a6f5-fa540de6bf42", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dedb599-e355-4f54-8ae3-0488cee2f82b", "sighting_of_ref": "indicator--a1f99828-b9c4-4ce7-b5e1-4d58d5e5eb60", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f5476d-7026-4bb5-9d30-19e09741d4e1", "sighting_of_ref": "indicator--7f10fe8e-434c-489d-97be-9134bd44a41f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf46d61-7a99-4bfb-8267-fd0c025b3c22", "sighting_of_ref": "indicator--53139894-af42-4110-a53f-a6e5eec06181", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5a3f5e-13cf-4cfd-8401-b7933c874b8e", "sighting_of_ref": "indicator--cdf7411d-0b68-4789-9905-f001cd26afa4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e761cf-0df3-4d4d-ba41-5a3213f91af4", "sighting_of_ref": "indicator--186652da-15f3-4997-8d8c-74549b0e3759", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e9c9af-c4ed-456c-967a-4d491e1af58d", "sighting_of_ref": "indicator--1292e3f5-fcc3-45b8-8a28-a9a1170a8a2b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae2aa64-2db4-4dd2-96d8-a77e1600aedd", "sighting_of_ref": "indicator--2c56b575-c555-45bf-93c8-13b21b3c45a9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5616a558-2fe9-4a5e-a58a-767a94a9a5ac", "sighting_of_ref": "indicator--79fb67f9-a6d6-4048-8907-97a85d7d7dbd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c6ed5-7352-452c-8451-0328c46c5239", "sighting_of_ref": "indicator--d4441a1a-69ac-4071-9ee2-3924dc938e22", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0a8580-a728-4ba5-8f5c-58943054ce17", "sighting_of_ref": "indicator--4aeb9eb4-3446-48e7-9731-eed8e8840bd6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a03ffa8-3892-499f-8321-1e3e28cc23a8", "sighting_of_ref": "indicator--bc94de6e-3393-44d5-b3b8-5cc4ac821889", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7060e250-8dd1-458a-9839-d625084fa1f7", "sighting_of_ref": "indicator--eefb194f-cf84-46e8-861a-92b53b1647af", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e50b43-8754-4f87-a231-779fba2f65d1", "sighting_of_ref": "indicator--f92dfbb1-c53d-4fd6-8df6-f18274871f00", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b3b4e5-ddc2-49ab-8517-ef54b7d8e9bd", "sighting_of_ref": "indicator--6c3b45df-87da-43ac-8875-9f7d8a87eca9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382fe71a-01eb-4df9-b6dd-57850fe335a7", "sighting_of_ref": "indicator--2fae93f3-5ece-40fe-a808-1ed509228121", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a65784-33fc-4b1f-90a4-9a67c3a5b9ba", "sighting_of_ref": "indicator--4e613307-36b2-4f55-a951-14fbd74f1a90", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d156a03d-9d98-4aed-832f-ab9180d11fc1", "sighting_of_ref": "indicator--91afba02-fe97-4d36-ac8b-49f7f396ebfe", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740bc694-f5d0-4c09-9b70-6e8ee7b51a31", "sighting_of_ref": "indicator--4f864865-dc26-4409-9d2a-47822b66cd67", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e48ebc-2d93-4b7b-b85d-c2d41259d4d9", "sighting_of_ref": "indicator--36ba9e9f-a7a1-45ca-b2d2-e2398aa72369", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ddef2f-8506-4d5e-a297-a4c608f00918", "sighting_of_ref": "indicator--434e426e-4385-4d9c-b7c8-4eb41f49cfb9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d006bac-c785-4354-aac3-e6fe44d7696b", "sighting_of_ref": "indicator--173c4a41-bb7d-4a28-be2a-4f6db30be80d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb96d85d-36e6-428d-bdd5-87e8e73c81b8", "sighting_of_ref": "indicator--3badca7b-d902-4adc-8442-7cfc1b08aa68", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cf91fa-754e-4280-8b54-6b8cff4cc559", "sighting_of_ref": "indicator--92fb193c-0733-41d3-bfaa-d7fbcb63a8d6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9a19de-05e4-4ed4-80aa-2ad1a932f121", "sighting_of_ref": "indicator--b965e0bf-3c97-4666-b516-b0628c35e880", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98eb3305-2a43-4282-85a0-756f5619f7cf", "sighting_of_ref": "indicator--06a02b2c-a445-452e-8222-cd33942f9ab8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d0c1ec-281c-464b-a2b3-493d0e4bc7af", "sighting_of_ref": "indicator--69eec8b3-f77a-49e3-9a4c-bf3e9a02ec3e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8490fd-7edf-4497-81c8-29cddebcfdaa", "sighting_of_ref": "indicator--a08fb0e6-1dcb-4915-8ad7-3bbe7a3c7348", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ba2b71-7891-4178-9a85-6242dce63c0f", "sighting_of_ref": "indicator--1ea198c0-f65c-4bdd-8d16-8e41a85a0644", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdc74e3-7774-4b01-93b8-755595ca5c78", "sighting_of_ref": "indicator--acc5377f-ca7b-4e56-a242-6d972e46809c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efabbd41-4ef8-43bf-8c16-ac482b8c9bfd", "sighting_of_ref": "indicator--e1541f84-6a71-47f5-bc7d-fe7408082d39", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0771ef-eab7-478a-a381-e142de0aed01", "sighting_of_ref": "indicator--24cdc853-6085-46ad-9bd3-a8bd003dd409", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda36283-7784-4cb1-919f-044fb966b2ed", "sighting_of_ref": "indicator--0eb39605-bde8-40cd-b9c6-cf1d83e28fa9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435298b6-cb22-4a40-ad8f-6d7dbad9e2ac", "sighting_of_ref": "indicator--192305aa-b75f-4cef-8fee-6768a6b7eb4c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e837a27-fa91-4e03-b8e0-4fb0396f3def", "sighting_of_ref": "indicator--e0612773-4106-4110-8c4b-a9e633ec1811", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fb7982-3acc-4b01-bdaa-67f66197a753", "sighting_of_ref": "indicator--c7f5a11a-a26c-4b90-b918-48ce188ea387", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aa2d85-c57e-4da5-b3bf-43e0af96aea2", "sighting_of_ref": "indicator--746a2c3d-9f74-44ff-912f-620798c85795", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7de3e9-491a-4fcd-b186-f9edf8e41d94", "sighting_of_ref": "indicator--3f23828e-974d-47a7-8db7-768f7c40ac69", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e024ef1-2559-4413-b218-b531ed0baadb", "sighting_of_ref": "indicator--ed4b76b7-10fa-45fa-8ce8-4694226b754d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33e5cba-0327-4394-9acb-6d5ca9a1e8ea", "sighting_of_ref": "indicator--4c2f2548-2837-464b-a3aa-325612e62681", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26a8052-4e7f-49b4-88f5-04fd31e1b740", "sighting_of_ref": "indicator--0a5fccb1-b0a1-4ee9-a5b5-24d1553004a6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c29aad-3b30-4f1d-b839-920a56a9fa28", "sighting_of_ref": "indicator--947f89d8-402e-4f2a-8781-1064a89c6e04", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa710df-c1d0-48f8-b108-e0f8e62cf041", "sighting_of_ref": "indicator--2c6ab806-2490-4b34-92b3-c7b3d54d1a14", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c118fa5-6627-4be1-9c8a-57eccd40e9f1", "sighting_of_ref": "indicator--8ced1d9d-9ace-415d-b852-440ac6e314d9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f423ee21-4a7d-4294-bef0-562a43870c2b", "sighting_of_ref": "indicator--7224100c-dd61-4d7e-bfb1-8d47452987fc", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1272bd0-c765-444f-a646-8e543128a93d", "sighting_of_ref": "indicator--a2ecc090-e836-4d59-b44b-856fcd4ba899", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54185cab-1ce7-4822-98a8-fa388f613d47", "sighting_of_ref": "indicator--d493c6b3-1c56-4820-a1ba-8adcf8512a50", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f561cd-ed21-4d81-86b4-4da2c6c546f4", "sighting_of_ref": "indicator--de9d5e6d-bf4a-4d76-aa18-066217993cc2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546b5ee3-a749-4352-876b-0f6479457c21", "sighting_of_ref": "indicator--1af0cab9-f7e8-4a05-bd6c-3daa9fbf5f0c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9732e743-5428-45ec-842d-effb631ee4b8", "sighting_of_ref": "indicator--aa72a725-be63-4bd9-8909-aad33a25899a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2052ee-1a75-44c4-9e41-87b114c0bcca", "sighting_of_ref": "indicator--c4d97875-cf8a-4af5-b5ee-fbe8642ee56d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0823f92-cf2a-4537-854a-2608991f14d6", "sighting_of_ref": "indicator--260cdb65-0f76-445d-9026-e70ee37f7b12", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2548a84-eed3-42bf-ac7f-ecb5354af467", "sighting_of_ref": "indicator--b844681f-098a-49ac-a85f-e32a6de42d1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288f4914-798d-41c0-a584-8b321cd6f598", "sighting_of_ref": "indicator--a95cf351-aafe-4fd2-ab2b-6636dcfe2994", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72aa824-15ca-47e7-a4cd-84627200b9c6", "sighting_of_ref": "indicator--dca25752-4762-4ca5-b4ad-4663b4595f72", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faeb78a-2764-491d-b269-e5002fd5ea49", "sighting_of_ref": "indicator--7fc87874-add9-41d9-81a8-131ad16baaf6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38289cc-2cb3-4c71-a3b9-c44a6df90fc7", "sighting_of_ref": "indicator--beab2132-a047-4042-9a77-8b7b7f1f0eb0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7936a4b-01ca-4dcc-b5c6-7aa65f26a77c", "sighting_of_ref": "indicator--f511fb47-7157-4a6b-8bec-6d2b3f78ac1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89966d8f-cf12-489e-8029-a332c762ceac", "sighting_of_ref": "indicator--4f8fe6a0-c2f4-4e25-86e1-667a14910c93", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9922e153-61cb-474e-81e7-9da8986cac05", "sighting_of_ref": "indicator--aa93ab55-9538-4352-b9cd-8c4e891bbc9b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35b2b3e-c250-4740-9f27-d4c24a6e567b", "sighting_of_ref": "indicator--87dbf05e-a327-4999-8792-dea91b11c821", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a66f1f-845b-4b22-ba7a-7d568e5c012b", "sighting_of_ref": "indicator--903bc7ee-ce8f-4155-bdd3-3c13d840747a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3f0a9a-06f9-47db-8ba0-6d2d486430e8", "sighting_of_ref": "indicator--c06e113a-441f-4e58-a887-6ae80a4194f1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73e4052-3707-4580-9c5c-f6b883f83d48", "sighting_of_ref": "indicator--52f5f0ae-760d-4db7-a086-e6eeab997fa8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89113ff-95e8-4db5-843c-cee5c80b995a", "sighting_of_ref": "indicator--8fec0ca4-9a85-4f69-a256-9e094f5aa2b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53c0819-8417-4efc-b026-4dd356f824cb", "sighting_of_ref": "indicator--d28315c7-d693-46ab-83f2-7497385fd6bd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795d6d55-11e4-4658-a33f-fee97a3c87bb", "sighting_of_ref": "indicator--b6d213aa-3376-41ff-9ec4-19f9b39519ad", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890020b6-321f-49d7-bc9e-da45ac77cc01", "sighting_of_ref": "indicator--dfe14372-f6fc-4184-8c2a-9889ba0517f6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6940c55-d0a3-42ad-a3bd-9e276b1d263e", "sighting_of_ref": "indicator--f859fc4a-7978-45d2-9649-46c4e297675b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29829090-d9f3-40b2-a632-42fb9c9b1df3", "sighting_of_ref": "indicator--05b8755d-bc29-49ab-b0a4-b308d2353298", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336a5c7b-f45f-4713-a151-c32898107c47", "sighting_of_ref": "indicator--e36f48a2-7889-4f78-9243-3e7800f0aa87", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491851be-dc71-43e7-bfb2-805fe883c83f", "sighting_of_ref": "indicator--71429cc5-f62a-4f64-83ae-f26002ef4d09", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3dd980-c75c-46c1-8de7-f0f19d5d1ab4", "sighting_of_ref": "indicator--f0094f73-7df3-4664-8477-0439a6ddffc6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d8ee56-f616-4b69-af66-568b3bf5b272", "sighting_of_ref": "indicator--e0c5c29a-8f56-48b3-8101-547f04610ab8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61267b56-4c6d-47f3-bc2d-b9bf58026ca4", "sighting_of_ref": "indicator--50ea7c4f-4f7e-4d13-a113-5c36a262d1d0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079ad0da-3a33-4978-801f-214edfd2e0aa", "sighting_of_ref": "indicator--649d027e-cd69-40cd-81d9-e7f8a752c887", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550a13b6-3c79-48e4-866a-0cca2ce4563a", "sighting_of_ref": "indicator--10719681-fe30-4b77-9c23-978055072a54", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0649c4-be21-41d9-b80d-d1e39695e995", "sighting_of_ref": "indicator--e2e9e656-b5c8-4cbb-8d5b-b1206d820c1b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d4cd5d-b757-46fb-921f-0abf8e75b440", "sighting_of_ref": "indicator--3bb7850f-bc32-46ae-a4de-8a9080114718", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098f947d-3929-4593-8882-7d7c0a09ca70", "sighting_of_ref": "indicator--5f8cd894-439e-4eed-8e2f-2eab99f440f5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256db28f-c9d9-488e-a143-189811456ae0", "sighting_of_ref": "indicator--ee7976da-b851-482b-998e-07008c9dc707", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd98347b-6793-4539-9075-240f14390b38", "sighting_of_ref": "indicator--97595ebe-488e-43c1-974b-0f69d55e68bb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32800bd1-04a2-4c66-b797-810130898a44", "sighting_of_ref": "indicator--e80785c0-3577-4b08-bd58-655ae8137ebb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11739a8c-68c7-4f8a-bfcc-5eeb18b313f3", "sighting_of_ref": "indicator--edf5ef23-74a8-41de-a557-001ec383387f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78866bd-e966-4c9d-8905-b054b7c391e4", "sighting_of_ref": "indicator--5fb8cac1-b6ab-40e8-a6f7-e0a7e7cefa79", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28a1d4a-60d0-4356-9cf7-f2e8dd65610b", "sighting_of_ref": "indicator--7563cc8b-f734-4253-a2b0-d91fa9808596", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3236728-a5f6-455c-b30c-8f60db562a14", "sighting_of_ref": "indicator--eb076b2b-f368-4f0e-9e81-33e8a9e8f782", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d40cb17-ee20-4862-ac1b-332897ee5b74", "sighting_of_ref": "indicator--deb6728a-8d52-418b-b47b-04102d72f658", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43233b3c-d223-4cfa-b57d-8dfee316ae84", "sighting_of_ref": "indicator--c73bf4e7-2f1d-495d-b177-1690825a0f47", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f87c641-61ec-4194-8068-16f7b1fe448d", "sighting_of_ref": "indicator--0c89d204-9d4c-4ff9-a63b-a30f6a36a7f9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f47f98-42f8-4b01-8dab-b7c5b3598762", "sighting_of_ref": "indicator--5ba9c684-74ba-420b-aef2-bd92ace9ec6d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a3e775-b400-43c0-8c56-a28bffdbcda8", "sighting_of_ref": "indicator--53671ad5-8fea-4b9a-aed8-e025db57c992", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a142342b-7dd4-481d-aa4c-ce00893ae682", "sighting_of_ref": "indicator--bdeab2d2-24c5-4067-8587-828b8283d3df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d45045c-93ff-4bd2-8c5c-f7ac5fd75958", "sighting_of_ref": "indicator--e07ff9af-d6c2-4fe7-badd-a9bd83ad7b33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edee5b2-b237-4279-9872-0f10ed0b8b23", "sighting_of_ref": "indicator--9b15b629-5546-4c45-9e25-41e65716807d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0764a73-d9fa-4dc7-9fef-d68f9c91b2b4", "sighting_of_ref": "indicator--b2ad398c-7707-456b-980b-ad395d4ca874", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7216c64-bbbc-4e2f-a836-7bdfc30ec08b", "sighting_of_ref": "indicator--09609a20-c02f-4e7f-8973-5b6818694961", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4176c538-454c-4f90-9d3d-3b9b2563b511", "sighting_of_ref": "indicator--091ee44b-f7d2-464c-a19a-d2d966fc4b4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0226bcd1-d3dc-48a0-a151-eb9519121290", "sighting_of_ref": "indicator--afddaa59-e6df-43b4-84d1-967da6a05c55", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a894255-495a-4847-849f-9a04a47fbf94", "sighting_of_ref": "indicator--a5013ed6-f9ed-4212-8616-3f4b4ff05e06", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1294358-2422-473c-bcda-5ebb81b446e7", "sighting_of_ref": "indicator--c7cfc5f8-9226-4e8c-8b68-3e065e05d1b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbec1622-3685-4a92-b3ca-d528ea78fd7a", "sighting_of_ref": "indicator--d9a41457-feae-42e8-bc9d-27859613e8d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d2b909-9b2e-456a-8f23-9cd3f2a7f13b", "sighting_of_ref": "indicator--571e7145-c566-4ce7-accc-f912258c82b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6d81bd-d8e4-4729-b4ae-5c42166d645b", "sighting_of_ref": "indicator--cb1d7edf-b695-4832-a84b-93ffe4156359", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370b86ca-8aaa-4a6d-acd8-f6e8a0a687b5", "sighting_of_ref": "indicator--16713d3c-7f8c-41f6-b1bc-4105440dac62", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf424bf7-ef55-476f-a35f-3fd67558ed5d", "sighting_of_ref": "indicator--978b7c61-b034-4b08-ab54-f887dc919cc9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb38694f-9cc2-4796-afd8-ef2af1f322d5", "sighting_of_ref": "indicator--22d8edf4-adab-4930-ad72-08bb758fbe34", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311cfea8-8eec-442b-b66d-b841d93f24c2", "sighting_of_ref": "indicator--50a99981-fdac-4000-844a-30a1817a6ecf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e156c082-ac2c-4dc2-aa5f-2664c2fdb8fd", "sighting_of_ref": "indicator--db4cb4a1-de17-409b-803f-0f51eb2c0295", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1d3727-38f3-4011-90dc-88495e1918b2", "sighting_of_ref": "indicator--494c5988-7911-4167-b3fd-62fd4235e780", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88a8775-f52e-4ffe-9b5d-876cb86597f1", "sighting_of_ref": "indicator--cdbeafd4-f162-4bd3-9f7a-29dfa8228a28", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be135a9-12e9-4e4a-86b6-39d98430747d", "sighting_of_ref": "indicator--79e95fa2-52ce-46e3-af73-2286a03314b1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f7f987-521b-4ba9-aa86-32f05b0a0233", "sighting_of_ref": "indicator--032aa659-5749-4062-af54-7a1786e5ccce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f27ff4-9c5f-48af-92a7-64bcf1e356a7", "sighting_of_ref": "indicator--4a1b862e-8a41-48ea-a44c-192c71e5f0f2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bbdfe0-6d96-4677-bfac-9d953b1ac1bc", "sighting_of_ref": "indicator--a2a1f1e9-693b-4bd8-be16-19291ac89114", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d84d60b-6ce5-4f47-ae00-91b16cc06d7d", "sighting_of_ref": "indicator--1acb5a5c-50ed-4e78-8c1a-a13853c43bbd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a458b5-4dbd-43ae-a416-def6a34dfd50", "sighting_of_ref": "indicator--6e4fc951-1594-45a7-9524-c91560cbe634", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd132f2-7a31-4110-947b-88f72c0e23ab", "sighting_of_ref": "indicator--7ed4f800-43bf-424f-a28b-dc9935f9fbc4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b43298c-f5af-4c8e-8666-913d1c1f7507", "sighting_of_ref": "indicator--ae8a3e5a-dc09-461c-b4d7-d893e7c88ca0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3112582e-409a-415e-8e86-573e8acfd4ed", "sighting_of_ref": "indicator--92edd6b2-7ca7-42d4-a108-61303ff26caf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05ebacd-141f-4b6c-97f5-83b299cf76c0", "sighting_of_ref": "indicator--9e0348a8-c6a0-4133-8854-c43bad029dcf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fbe9d0-d0cf-4984-afbc-13fd180456f3", "sighting_of_ref": "indicator--3d481459-96b9-4cb7-8cca-12b07683e096", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791afe77-44ee-4d50-96c1-01132741c74c", "sighting_of_ref": "indicator--947a83b1-43ad-41f6-adac-3aa3195d9325", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbc4d00-62f7-41ca-a216-45e5d03e6ac7", "sighting_of_ref": "indicator--982df406-660e-4dbf-a680-6b42b65dcf2d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376d7e39-abed-4407-b6d6-6fc66cd23f21", "sighting_of_ref": "indicator--a61edc36-3b8b-4816-93ab-93f2f99eae7e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eccf7e8-a376-4b6e-b892-6f11fd20a4f6", "sighting_of_ref": "indicator--c5c52941-f400-4b2c-901a-7974984c9990", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6255ab-527f-4223-a76f-779baae566a6", "sighting_of_ref": "indicator--e98259c1-cdec-43e4-bf21-d37e27996124", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebd4532-a957-4fca-a0de-47058e0df600", "sighting_of_ref": "indicator--2d2d3f85-9846-4332-91c9-d8f40e9575db", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9700251f-0789-4c46-9581-15edd8a64f06", "sighting_of_ref": "indicator--9cfe5142-6054-4591-848d-e5c494837aae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e3c3e-8d0f-4d48-84f2-485300525982", "sighting_of_ref": "indicator--65eadb30-d77f-4076-a27a-2457e635a128", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46487bc-bcc5-4015-b1e8-846f740175e9", "sighting_of_ref": "indicator--0c8129ad-0264-47db-963b-369f0f745b6f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e8eccb-7ea8-48b3-bafd-d9add1886bfb", "sighting_of_ref": "indicator--fb8598d6-c249-4414-ac36-ccd15143f701", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57af648-1b09-42fd-be2b-049b3941e7d8", "sighting_of_ref": "indicator--ad9b628e-546d-4fee-88c8-936b133a9984", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8275f66-b868-48b0-8fba-f382e9e195e7", "sighting_of_ref": "indicator--1ebfda4c-2bb9-47c2-8a6d-a246704c9076", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae340a90-7d9b-412c-8ad2-3e0bb3d37329", "sighting_of_ref": "indicator--31e1258d-bc3e-4b6c-a1a1-3e6d2052ffcf", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02709212-dbf7-4b59-ac10-496cc0e98efa", "sighting_of_ref": "indicator--bdaeed36-d92d-439d-93e9-f832eee5d2e8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808c9146-a034-4d35-8be0-7b95dbc51f04", "sighting_of_ref": "indicator--9494e6f1-fa76-44cf-a70c-8ff38e7e91a2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7cd5a8-5a9a-4c5e-affa-90deefb9a37e", "sighting_of_ref": "indicator--5502c1d8-b0d6-4081-aab0-63f6b4413eec", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04344e9b-c33e-42ce-9725-0f478d01229d", "sighting_of_ref": "indicator--cc4cab59-5445-434e-aca7-361dc5f0ce85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56524371-7f3d-468f-9d6d-a89caecd0d50", "sighting_of_ref": "indicator--7bee1bdc-d695-40c5-bf62-242661e52b28", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43912a4-54dc-4a44-a0a2-27bb97fdf4e0", "sighting_of_ref": "indicator--672ac6c0-4f82-4ffb-a5eb-afbf4988b472", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2b931a-5cb5-4757-a192-715d14989c55", "sighting_of_ref": "indicator--60e20f87-d399-4133-b759-3c8f05016f85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe87da63-8f7e-4da2-9c72-c714c7d873ad", "sighting_of_ref": "indicator--a879d24e-7934-4431-9107-c84f0ff91a78", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928ac332-3b05-4ab0-8b77-f623c8c8bcb9", "sighting_of_ref": "indicator--5b35d10f-9dea-4101-9cd7-ce60c84feb07", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97b164c-ac46-4f98-bdf9-11f64ed8c98f", "sighting_of_ref": "indicator--b466b4cc-0303-49bd-a4b8-36ac0f50f3d1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b54886-b2f5-4f8c-9571-cc2092e47f3a", "sighting_of_ref": "indicator--0b14bcce-0964-4158-9d79-90ce5d36b328", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1888fd-77e9-4033-8da8-85df7588c367", "sighting_of_ref": "indicator--00f747d6-f151-4a5a-9bb6-f01581f97efd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c795722b-f4af-4ff6-a48d-0df508cb0bfb", "sighting_of_ref": "indicator--34a6455e-6a9b-47a4-bdc3-3760a4d14aa1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a24ca57-ac76-4b60-941c-e6aa38c3374a", "sighting_of_ref": "indicator--36ba9c79-6142-4309-b799-3903a461ff2b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1849f15-bcd6-4ac4-ba78-6ee01bed1d98", "sighting_of_ref": "indicator--60414872-402d-4a15-9d3b-797827733ba7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08d5c45-d760-4f07-8471-f44292f6acb7", "sighting_of_ref": "indicator--2a9b3118-1a55-4b6e-bea6-f5da699b1073", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7904f2ca-a39d-4649-9330-1ed3109e83e1", "sighting_of_ref": "indicator--dd1f3fc1-7e8e-441a-a0df-11b2c23ec60e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b127a348-d504-4313-99a7-77ac74c51889", "sighting_of_ref": "indicator--c898e3b1-42e9-4573-95f8-182fd06e7e91", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efdcc7f-4bf4-4c3d-8187-c2dab193e618", "sighting_of_ref": "indicator--d1c945f0-e22e-415b-ac53-4a5dede134e0", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326afd18-d3b0-4d52-981a-4b45c1d50d3f", "sighting_of_ref": "indicator--3f2d0617-518a-4eca-876f-a381646f8f05", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e86be6-e394-4ed7-89fb-ea3fff682ae8", "sighting_of_ref": "indicator--312bff12-ceba-4d2a-93d5-f98e7771cb8a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eda7357-8490-4bbc-afa1-842b0388491d", "sighting_of_ref": "indicator--bdf6fbbf-b688-4f25-843c-6834c7db8cce", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32b7c28-90ac-4af9-99bf-c3478edf07e2", "sighting_of_ref": "indicator--a2967aae-0384-415c-80dc-f3b9170e23d8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830d5112-c484-4647-9fea-81877a4c60d9", "sighting_of_ref": "indicator--ec877840-809f-4331-9784-852c5a34d015", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e3e17e-6d74-4c04-8642-5f1be2ea1b3b", "sighting_of_ref": "indicator--71349cec-e613-4e67-9e30-0f4372408388", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866b7d6d-2203-40f7-9f3b-b6f760b70e77", "sighting_of_ref": "indicator--b60161b2-551e-46e6-a880-fe0d7a177f29", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5e7373-8102-4168-8b6f-9d5e5e82aa46", "sighting_of_ref": "indicator--6b386f61-50b0-453a-b323-647e2d7c8d26", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f13261f-0b5d-48b2-9518-18a556ba4e84", "sighting_of_ref": "indicator--d064b467-f5a1-47ee-89f6-2fc46b57538b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed11422d-52df-4572-a4a5-3866b3cc6fc5", "sighting_of_ref": "indicator--63b6c625-6ac5-4f7b-8825-01d5cc006896", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77ed953-ba2c-456d-b73b-6860eeeee3bc", "sighting_of_ref": "indicator--0143ff7e-2e57-4422-864c-3a9e3a6e208b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e162f6aa-fee7-40f7-b556-0f8d899080f9", "sighting_of_ref": "indicator--ef848ec7-aff9-4d68-a597-bb5f88d11c36", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d9736b-cbf6-4be2-b652-3ef700a022d9", "sighting_of_ref": "indicator--0d47c3d1-6702-4029-b333-312233c691d3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340993bb-b6f5-4291-9de6-8e559b3cb8d5", "sighting_of_ref": "indicator--3c902386-aae3-460c-ada2-7e00c3a9c93a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e8f630-257d-475e-9745-41a284aa16e3", "sighting_of_ref": "indicator--9de9d94f-9529-4fdd-b67d-2fdd39f4ada9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665db967-3ed5-4088-94c1-fcd6543c50ab", "sighting_of_ref": "indicator--4b8315bc-8ee9-463a-934d-15afef80b904", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403fc496-afe7-4e6b-9e09-b826c0df9cbc", "sighting_of_ref": "indicator--c5c74882-620a-4af5-baba-22eab54937a5", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09035717-172b-459d-be74-38f982688f31", "sighting_of_ref": "indicator--57bb95d9-8a4b-4fe3-9254-7f6825efc5c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206843dd-666a-4fb5-8081-ec540c5329b8", "sighting_of_ref": "indicator--350c20a5-6ebc-4ef5-9d53-f0f975fc7d4a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9411d34-cc1c-4933-87af-a98f86d58906", "sighting_of_ref": "indicator--8af20ec1-d9ee-4ffb-a3d8-ec23b647af3a", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109a1a05-4778-41b1-a3f9-91e078840997", "sighting_of_ref": "indicator--6f8587be-001b-493a-898c-dcf6c436924b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baf0d47-ba88-4473-a6f1-340a35baa680", "sighting_of_ref": "indicator--364ea7ea-6b25-4a64-8f25-f7b6c7d358f3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6986421c-7937-4508-96f1-fcb259343d22", "sighting_of_ref": "indicator--d0fa592b-642a-4abe-94b1-3575fdd1e301", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647669ca-b5ee-4aee-af66-bebe8ea837d2", "sighting_of_ref": "indicator--ea0f8cf9-1fef-4a94-8287-6054844ce2b3", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d48a1f-a3cc-4860-9bf7-c924cd7c1734", "sighting_of_ref": "indicator--e8bd95a5-fe2c-4ab0-80ae-262cc84c39c6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9707d1b2-8823-4105-87e6-7343c4af6f25", "sighting_of_ref": "indicator--a26c0932-d511-4c48-a0a0-2a7c053c02b7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7568e855-f89b-4f66-a8b3-73d290679f91", "sighting_of_ref": "indicator--89967c27-54ac-4dd3-b629-3171b5889ddb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce39ab7-0d53-445f-981e-d6b47b28a045", "sighting_of_ref": "indicator--552c0241-fb26-4229-8447-e889589f120e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a964f0-b809-46b0-bd5f-471c69beff84", "sighting_of_ref": "indicator--d1289e81-0ff8-4790-badf-888694034b33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aca7ce-db0e-4217-ba58-241d1cd77db4", "sighting_of_ref": "indicator--5cea4a61-838f-4f5f-9821-720d2f0080aa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905efd74-cc95-422d-aa45-6f646bf48763", "sighting_of_ref": "indicator--ac9b4c84-7300-4637-9f7f-c6cd5375b8d4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d694ad-6997-4f39-a6df-c421ca190e6e", "sighting_of_ref": "indicator--5f7e7eae-30ba-41ba-8226-836d91956f85", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825d7412-42ad-431d-89f7-0bfb09fdad61", "sighting_of_ref": "indicator--3a035e31-d5af-48d5-a82a-4ef6e0462198", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92948059-3b4d-46fb-b586-58a4bc5ddd4f", "sighting_of_ref": "indicator--ea1d3f53-cdfd-47d4-a706-f8c03808493b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545983fd-c6a3-4bc8-9fb2-84f346b6e849", "sighting_of_ref": "indicator--9bdc0c80-08de-4f1b-96ff-dd6fa670e276", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb8a37d-4cf1-4cbb-9ff2-73cdf6eafbd6", "sighting_of_ref": "indicator--c92ca69c-e2f3-4642-8260-ac81ca529feb", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c01de5c-669e-48bb-b9b2-74e01c6a993f", "sighting_of_ref": "indicator--eef0c67a-8874-4396-9753-08f39ec72374", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81534db4-e37c-4028-8b1b-cb8091b84dc3", "sighting_of_ref": "indicator--adccfa53-42c4-485c-82f4-e8f2252d4781", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f941e3f7-0580-49fe-8e3f-600558c6a2b4", "sighting_of_ref": "indicator--4f0fdde0-0ac7-4810-8ebc-e5e2b5034ffa", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9199b2ab-85f0-41b9-b646-870ec929f834", "sighting_of_ref": "indicator--95667ee3-6a4e-429a-9d39-8e97321ed559", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ee5ca5-60d3-481b-b4e8-a8aac5b16f5e", "sighting_of_ref": "indicator--ff4e4332-1798-49f6-9bad-0ca8c206c06b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6821730b-54ca-41f0-8638-d4b378a34e1d", "sighting_of_ref": "indicator--8255078f-f61d-4793-8a7d-d5f34f4ccd3d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91408d2a-7f7f-4137-b6c4-a2d1f04f611d", "sighting_of_ref": "indicator--14f8d43f-b844-4d18-85ee-026aaa27eb92", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1928b182-83be-4ac4-b760-d90491d28a06", "sighting_of_ref": "indicator--696d1f10-dd22-444b-95c3-e109aa975e75", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089bc733-22dd-412f-9dc4-a663eb923113", "sighting_of_ref": "indicator--69791a3a-ed0d-4db0-aeb1-6ac802fa6b53", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af63f353-7703-46f7-a717-0426d11adf14", "sighting_of_ref": "indicator--74bff9e3-43fe-476c-a61f-7ed19de2deab", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9040dc-b989-40a5-bc42-793f6779b82b", "sighting_of_ref": "indicator--8dd2332a-e811-443f-a155-a137992175ca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7bc278-6054-492b-aeae-b26f30716557", "sighting_of_ref": "indicator--a93943b2-273e-460d-829f-913b0894764d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7425028c-ee04-4140-910d-d0c772ceff81", "sighting_of_ref": "indicator--5f00c817-c49f-43fa-b702-eb59b9036399", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b796a4-be5e-4e4c-9c99-4c3d39c238dd", "sighting_of_ref": "indicator--eae979f2-fb5e-40f3-9b38-25e5379ffdfd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c07b4f-4400-470a-b95f-33e9931659d6", "sighting_of_ref": "indicator--3513e10f-73f8-4aea-b0ee-36f9018d1625", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5c02b-ba74-48e8-96d5-1417b8e8b835", "sighting_of_ref": "indicator--40ff20b7-a0df-465f-b0e9-946fa193a706", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966c6aa4-5f4a-4cf5-9f02-3dab9ae0ce85", "sighting_of_ref": "indicator--38706f14-6289-4f06-b25d-9d848d13e385", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bea6632-caf2-4872-b641-72ee598c9561", "sighting_of_ref": "indicator--1589769b-f2c6-4c38-8173-61bd0258aa26", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6725fe37-0486-464b-8381-a94df6b5b935", "sighting_of_ref": "indicator--e079ba26-4050-4a49-aba7-13a1da6dc91b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56ccb1d-45c6-4e3d-bae4-a9634401f41d", "sighting_of_ref": "indicator--400bf627-9e34-40de-b8fd-d3ae723cf89d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c0f804-feac-4838-87eb-c423850fe4b0", "sighting_of_ref": "indicator--573f6cb2-27d0-4b35-b68a-4ef8a62acf33", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77106de8-59b0-46b4-9276-e523f9ceb7a8", "sighting_of_ref": "indicator--195ce24b-775d-49fe-acf1-93b4929694d2", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94983501-9fe0-4983-94f6-fe1e5342266d", "sighting_of_ref": "indicator--c4c25314-efc6-4d55-98ab-7f7c304f67c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3228a130-89f6-4340-8697-554d3171818d", "sighting_of_ref": "indicator--3435acbe-18d8-476c-b3ba-5c945c862e2c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776ff723-d17e-477f-b736-21fd503843a2", "sighting_of_ref": "indicator--75305580-9d42-4647-bca0-07570d71b847", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4c44d4-567c-4e47-bfde-ac5684cb010e", "sighting_of_ref": "indicator--ca4261fa-bdb6-46ed-a45f-741cf2342ef9", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9863380e-240b-4a97-bbcc-2581f65d07fb", "sighting_of_ref": "indicator--d7d87a16-2a71-424e-854a-e94ce1d85d26", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9207972-8abf-4ac7-8cb5-f7810c899ea3", "sighting_of_ref": "indicator--bd848ed5-1809-4980-911d-f4b0b038a86c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6eef824-18c6-4069-a3c7-4703c00708f4", "sighting_of_ref": "indicator--3d99b2b1-5b88-4608-b111-e9a892193f9b", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4b7327-d412-4550-be80-8d35d71e96df", "sighting_of_ref": "indicator--72d48a15-d677-48e4-b81f-5babf55a8033", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17146642-82bc-48d5-913a-f62f86f547a2", "sighting_of_ref": "indicator--0efa55cb-735f-447e-921a-e436ba335067", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07af406-cedd-4822-8d36-36a14be5e9b8", "sighting_of_ref": "indicator--d21569a4-ca88-471d-8155-d9f1e2007bca", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f06f910-c468-4b79-9dba-94ef71dc1ab0", "sighting_of_ref": "indicator--7d82a89c-0de5-4908-af57-9acb5770c176", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafc60e2-f893-4854-a45f-cdb7de8bb07f", "sighting_of_ref": "indicator--f47a77c5-2618-4f22-be5a-243b60ebf1c4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de1f9dd-77e6-4912-8e36-8ded1faf9f94", "sighting_of_ref": "indicator--4b1d204c-1c02-404e-a41b-bf7dd6113468", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b302e5c6-a41f-4b94-b687-1700edc15805", "sighting_of_ref": "indicator--bba4c8c1-4a32-4195-aafb-3ec99ea9b1cd", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cc4fd5-9ef8-492b-a9a9-eedecac327a9", "sighting_of_ref": "indicator--6312d89e-83cb-4422-8a08-f3daf9be21b4", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e487e7d0-ea16-4c25-a793-5c9fbfc65c4d", "sighting_of_ref": "indicator--a71cca69-18bb-4eb4-98a8-5d1399a2baea", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c0bf7f-e0a7-445b-bbd1-8ae70d6fd512", "sighting_of_ref": "indicator--dd387123-08ed-46d1-8400-4899c732ebd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5278cc26-3a18-49e9-bd21-a790d3c656c3", "sighting_of_ref": "indicator--4987a1ff-b490-4c12-8534-5d6be07ef1b8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5cab0d-69a1-4979-a2ad-c0c8a00ef1a9", "sighting_of_ref": "indicator--9efce6cd-280f-4c22-b072-c46efd687116", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbfa151-4e2a-4889-918b-f8183dbe2cf3", "sighting_of_ref": "indicator--33dfbbab-3c63-4a56-97bf-23f1ab6b7d80", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24272b2b-2cce-4c49-b377-07d91f25f074", "sighting_of_ref": "indicator--9cd6a960-95e1-4dbe-b3f8-0d5d43e21add", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6032e00-294f-47bf-b794-665ae603eb80", "sighting_of_ref": "indicator--45066fc1-0e5a-480c-bcdc-2fad50020606", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a449208d-f10c-4078-a798-355e3c9eaba8", "sighting_of_ref": "indicator--4228820e-bfef-4092-bb22-6b9b79a0830c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0326eebb-f249-401a-8e78-e11ee1aebec6", "sighting_of_ref": "indicator--877df2ef-fe6c-41bb-946a-5b2468472ed7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac61a59f-7b9a-4909-9001-6871051bfc0c", "sighting_of_ref": "indicator--990243ed-3dbc-410b-89d8-6fbd96955946", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b89d59-f669-4b3d-900e-09ef855fd599", "sighting_of_ref": "indicator--30ef5684-9fb3-424e-bd52-2db16f60d125", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aea7332-5260-4084-a31d-398ce5e0e04f", "sighting_of_ref": "indicator--924d1bc2-ac87-420c-897a-64628e33972c", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067332a4-cf4f-4b9d-9b5e-0a5e450cfbd9", "sighting_of_ref": "indicator--f92dcd53-d0c8-487b-acef-887d533dc199", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce0b991-bc74-4796-8e59-b367cce4a76d", "sighting_of_ref": "indicator--c2c9758b-e084-4afc-a3f9-48072e3e3aae", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caec9cb-8707-4c26-9425-a6f5ed5ab140", "sighting_of_ref": "indicator--bc73e972-c619-474a-8403-c06be486e1de", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abacfaa-ec62-4694-a78d-96ac5cac2b89", "sighting_of_ref": "indicator--7ce3e3dd-11c1-4ffa-959e-064a31271cd7", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1448ff56-1e5b-44bb-83ce-c0c6d245a3e7", "sighting_of_ref": "indicator--fe9ef3c5-19e3-479c-ba15-38d2ac04bbf6", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb3e14e-25f7-4e2a-b0ad-b142b22c90a1", "sighting_of_ref": "indicator--7726586b-7d38-471d-bc83-813334929d59", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458063be-84bb-427a-9997-f0bc0ba33e56", "sighting_of_ref": "indicator--934d37fb-39c4-4127-8ddb-16ca7107b906", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a1f6d0-667e-4a65-887e-b4cc2bc8a76e", "sighting_of_ref": "indicator--3e2b30ff-c635-47ba-a3b2-3faeb8ee010e", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8608dd-c680-41cc-a86d-8aa3f397bd5c", "sighting_of_ref": "indicator--acf0b742-6872-4fc1-aeac-d382b9eeb65d", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5e0e05-d64e-4778-8e56-3b0b47d4dc4b", "sighting_of_ref": "indicator--4f46af4f-70ac-442a-b60b-ef4662fa1785", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d3b067-38ef-4f5e-9e54-c83ec253ad29", "sighting_of_ref": "indicator--a5c32f3d-2966-4991-95f7-07732360edc8", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d487445e-538d-4d57-bc42-6f820bc365c2", "sighting_of_ref": "indicator--930518e6-62fd-4ffc-95cd-5d4259aba08f", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8738a16f-8a79-4a75-9fba-a55c66500545", "sighting_of_ref": "indicator--77e9c8db-2cc7-4d8a-a3a6-2e3ea2d046e1", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e89b9c6-965a-40ee-b24a-a28941106d12", "sighting_of_ref": "indicator--89f32c9a-85d6-49d6-a9e5-82d62b20c3df", "where_sighted_refs": ["location--e2267548-ba2c-4808-af48-b1c43f80dfe6"], "first_seen": "2026-07-02T00:00:00.000Z", "last_seen": "2026-07-02T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--8c52cee4-7d8d-452f-9d0a-223dda70b52f", "name": "Threat Report for 2026-07-02", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-07-03T11:00:01.817Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--e2267548-ba2c-4808-af48-b1c43f80dfe6", "location--6bbdecb1-f56c-4c20-b49a-9ba0b722ae32", "infrastructure--66028a4b-389d-4706-a300-39868a75ca7c", "infrastructure--be2abe94-a3f4-4d8a-ab2d-334c61f9eb44", "infrastructure--af110a8c-4cc1-4959-b9cd-790d5ade2eee", "relationship--33dc76bf-7cc5-4613-9f16-82d849eba1eb", "infrastructure--751c47c5-74f7-44ca-b896-756096fb621b", "relationship--2b9652de-f0a3-471e-a0e7-6ef10744abd3", "vulnerability--0099a06f-b165-44c4-a55c-8782a98dfaa4", "indicator--0d71c52f-893b-48c3-9799-fe2637bea174", "indicator--f6b545fd-5f70-45e3-beba-a23a31134089", "indicator--cd9ecd35-105a-4ecc-8b75-9c6b53e1d647", "indicator--fb35e0f1-5eb4-480f-8b04-604178ddbda0", "indicator--98ba5e60-b807-492b-9f6d-761b4e0b12c0", "indicator--fe1ddf1d-5462-4447-a532-b46cc2be23dd", "indicator--7c29c831-93ae-453e-a25b-c62edc5cb758", "indicator--ed811657-ab82-4e2b-95cc-013268143393", "indicator--82e4138d-8031-45ef-a99d-6367afc0ebf9", "indicator--18cb33fe-47b1-41e6-ad74-72d7a05211cf", "indicator--9fc5082e-41d1-4a09-9604-6d5291517d0d", "indicator--e334cfe2-6973-452f-8183-99b840ec5918", "indicator--7067d6f2-4039-48c7-b9c5-c9d94b1f49f7", "indicator--fe89ec84-9aa5-45cd-9ed3-c7ac402c33af", "indicator--db0b89c6-257b-437c-95be-1a3d6597f793", "indicator--b5011e53-88c2-4fef-a3b4-b700cf494535", "indicator--9334256c-bf0c-4f09-bc67-b14b422e0974", "indicator--39fabbd8-ea46-402c-94a3-9dfd60b4a708", "indicator--443cb742-11f5-4a39-917e-0181320775c2", "indicator--4c6c259e-040c-48ce-8891-7a0d89e40d02", "indicator--fec1e2e5-e9ac-477d-8776-82d468b9cf2a", "indicator--9b9b3014-be10-48f9-b82d-d0f993ade61f", "indicator--238387b1-a9c0-4e16-b1a8-0020f02df017", "indicator--7f677624-535d-47ba-bb4a-bc21062f4e9f", "indicator--08c89f56-15c9-4ee1-9737-ab317f04aac7", "indicator--155f11c1-d237-4165-a338-610b7c71f697", "indicator--ecbc6792-c750-4967-b532-55dced3e0c39", "indicator--cd029780-1474-498e-ba90-56721e07f24c", "indicator--51bb0c58-1fef-4b65-8e71-eccd843c90be", "indicator--a2da0b1c-2796-42c2-996f-3096f695ee69", "indicator--16e08422-1902-4c53-81dd-eb6a359b8c9d", "indicator--660c1a2e-0be4-4e59-8da5-8ea0fa7252d9", "indicator--ca2f8855-e49b-4e16-80d9-8933400d4dac", "indicator--d3edfab7-65ed-44d4-93c9-b59c260cb329", "indicator--24ec76f3-d66e-4d87-b7ec-2622a573297d", "indicator--dc6b15c5-54d9-4baa-a5dd-c0241064d1c7", "indicator--e4337cda-eb3c-4606-a3b5-238f905d3e60", "indicator--0fa9ee1b-711b-4adb-ba87-f5a387757f42", "indicator--82b0fefe-c8b6-4172-bd42-95b7e977fb9e", "indicator--cb0b234a-83c2-4b36-9b02-3b71f5373c30", "indicator--d7653173-49e0-413a-8fe4-0f4c95dc2d0c", "indicator--cae472e9-fcce-41f1-95eb-989e20221aa4", "indicator--c3d7021a-c6c0-4d2e-91a3-6137ee1558a7", "indicator--b90e87b1-0756-443c-896e-ea1bf5f08eef", "indicator--58a1ff77-1f9d-4390-9d60-9ee72d24b874", "indicator--ddcc102a-2999-40b4-a76f-2b2969e74d7b", "indicator--df03da7d-d372-4636-a74c-75079529aa5b", "indicator--5210d4d6-b142-46f8-b810-8bd755c38b6d", "indicator--88843c57-d405-4987-8120-415f3aa3e329", "indicator--1addac0f-0f5f-41b3-a98a-be83c4cc5d1a", "indicator--4cc21624-1d00-4078-b9ce-3dc6768965ca", "indicator--8db5f051-feac-4b53-9e0d-7a4a45bf247a", "indicator--f164176e-a4d8-43d4-a737-434c5c942c7c", "indicator--69db7e86-482b-4ef5-876d-ab895054acbc", "indicator--c99db38b-8868-4eff-b9fb-d706c5bddaf3", "indicator--f7be97d3-bcf2-4b8a-8ffc-372c093742f0", "indicator--b43e6e97-cb8b-4fd5-8552-90848116028d", "indicator--bb88405e-b71b-4cf0-a311-5da867fd7a2f", "indicator--cceb9927-ed26-4eca-ba31-dcb099e80447", "indicator--610df9a0-50cd-45b6-ad68-34f7f17e50b7", "indicator--7a118db9-50d1-43ea-9e61-0ff24c6e169b", "indicator--8f83ec41-a835-40d4-83ff-93973f3394a2", "indicator--890df7fb-b1d2-4028-9f9a-eae43c89efa1", "indicator--e096bde7-a598-439c-9a8d-a5c8e85fe6c9", "indicator--a93c87c0-7b5a-4772-a042-f66599186419", "indicator--59181228-0d75-455e-aa5e-3fd1596c9792", "indicator--78342c3f-b4d6-445f-90fe-4c23ba77ee0a", "indicator--04441717-540d-4c8c-b64e-503db96077a9", "indicator--0ae3242a-13f4-4d16-a449-34fb5c4d9720", "indicator--02d8c238-a3e8-4303-9035-714389e0fd10", "indicator--5a60f97f-90fd-448e-9782-a13e15d9e1a4", "indicator--fd228c24-03ba-4075-ac37-14f7f551013e", "indicator--ec8af842-491f-4e87-95ec-40865d88750c", "indicator--021d168c-1fba-4713-b128-9a1d05e9951b", "indicator--34153fb5-17ab-4677-b6ea-2189a993feb8", "indicator--3a800f43-1378-4cc6-afb6-94165c5daf4b", "indicator--9f33efa5-3f3a-4e16-ae4a-410f69dd4900", "indicator--36bd51fc-1ea4-4a56-987d-226221d76b03", "indicator--df72fc7d-e43c-478a-aae0-afbecbbfd020", "indicator--daf9be20-f650-43d9-8368-ab43c93b9922", "indicator--a9c9812c-3e4c-4b54-a282-4736764d4dc6", "indicator--1ed6d894-45b0-4708-8ddf-110ca53240bc", "indicator--d4c443e2-8da0-44c8-b5d4-fee353401b7f", "indicator--fdf454dd-f757-4248-994f-9c5535c4bea4", "indicator--64aea5a2-8d29-4032-9ed6-d83079458254", "indicator--e92eb9f8-6ed5-4f11-9494-dc70cdf20c1f", "indicator--5ffd4ea3-42b9-436f-9f52-356ff3954b6b", "indicator--9b5540eb-d653-4846-be27-2be5edff12b2", "indicator--4d10e9ee-9544-43c7-891e-cd3bc4951172", "indicator--7385c234-737b-45b7-862d-4cc3245610d7", "indicator--10b6381f-b510-458c-8a4b-d3d97226e837", "indicator--c16e90f7-a178-48fc-9599-b0d0d10a1ddd", "indicator--d12f3c34-8e26-4ba7-9f4d-25ea16fdedfd", "indicator--7f07cba2-6893-44e7-89cf-f77fe4b58c4e", "indicator--eca7a60f-4034-468b-a29f-ad920f2bcfb9", "indicator--e4bb0345-eb92-48c1-b232-4d9771a34374", "indicator--f1a0f394-f3f5-4605-847e-8ba345d0b8e6", "indicator--570aa7c9-8d6f-4aa8-866d-dab9e2270c60", "indicator--3456cfd4-e100-4817-9d74-537acd3d6613", "indicator--4cbdca8b-d921-403a-ab02-17c4c188eb3f", "indicator--92772ee3-7849-4962-b52c-dbd7864205c2", "indicator--8217dffd-802f-4b5d-86a6-d345d379c598", "indicator--343713e4-8aec-4266-9549-545ed28dcd6f", "indicator--acb81224-3663-4f77-9375-09cf01aa6b90", "indicator--caf765d9-5a9a-4edc-84ea-b36a997ef4cb", "indicator--1e334da4-6178-469a-843c-616ce22fe1eb", "indicator--9eebd49d-8c99-4d42-99be-971591e9682c", "indicator--6dc33239-1f94-4b2f-b57f-a5f45920eb1b", "indicator--fd8eb802-c27c-464b-8cbd-d135b1365673", "indicator--7d765ebb-1782-4a3f-82d1-0bd33a0a11fe", "indicator--c09356b4-ce6a-4675-9a1a-d67bb1c1801f", "indicator--c742a5e3-fe9d-4547-bb15-0550d0d68067", "indicator--797d230c-1cc4-4455-8507-13b0e8fdd87e", "indicator--1f057e22-4ebf-487c-a5f7-f248de7f4bf8", "indicator--c059354c-3a26-441e-a60e-8b01af6e4207", "indicator--b8738eb8-18f0-4883-8d7d-8b7684e0cb1d", "indicator--a8ffdf8b-5da8-4611-921c-a4e568cf77a2", "indicator--c248a901-3d74-4885-a846-57f02b6a557f", "indicator--662aedcc-6706-4eed-947d-3a900e13f53b", "indicator--162b4805-7f81-43ba-9776-93921d584612", "indicator--01aaaa9e-9556-4370-b3ff-491db9efe5a4", "indicator--322607cb-1be4-4ee5-9ef4-c346d56e01ab", "indicator--0a25cc58-b1a0-49fa-86dd-7f3dacc20329", "indicator--81ed76ae-4790-48d8-94e3-1c45ca9c730c", "indicator--1055ce7c-493f-4758-a913-00872840310e", "indicator--0578cffb-bf94-4332-9372-dca4cd770bd6", "indicator--ce58ef51-fbcd-4c3d-aac9-3ac46304e9ca", "indicator--95934184-15a4-4233-9780-c2ac83d5665c", "indicator--4b465411-dc0e-4910-a8ae-1597503feba4", "indicator--a0d7a2a7-68a1-4ec0-901c-06a84108e0bd", "indicator--34350858-c892-4141-a044-2396e5db0588", "indicator--d5065154-eac0-436b-bfab-5fd0239ed92e", "indicator--4bb0e9d7-42d7-4792-8de9-10883c9ad50d", "indicator--82014695-5a1d-45c5-aa62-9260aa387af1", "indicator--f350937d-be2c-4cda-96bc-bad33d6937a2", "indicator--9f385e48-ab48-4b10-8306-20912dec034d", "indicator--cf583a9b-42b5-4fee-b091-ff34c79b2d81", "indicator--194ddb24-dd21-4240-9f8f-8301ca54af7d", "indicator--053414a2-253d-4df8-b1ed-baa35ef0d6fe", "indicator--a6bf8437-b796-47da-ab81-c795ade6e606", "indicator--0733a3db-0481-41d0-ae8d-7b6b580627bd", "indicator--6ab341ad-8749-4d50-8038-36f323e76b83", "indicator--476344f4-20cc-4269-bd0e-80591cf4ff9c", "indicator--008d0fe8-2970-4383-979f-6bd26f835d80", "indicator--73ecc36c-d6dc-49d5-8f53-00644f637daa", "indicator--c3c3b22f-2f31-4b79-9994-2c009c8fd55b", "indicator--f38039c5-42f4-428a-92f4-5afa345ef08a", "indicator--26af9b13-e246-4cc3-bbd4-06a1719e526c", "indicator--6f794e46-fe65-4ffd-b35b-025df418740f", "indicator--8cb730ad-bd0b-4a66-bc4b-79d7f428c7e8", "indicator--53c1581b-9e4d-4fcf-986b-d255e1646cb8", "indicator--81b6a60b-e51b-40f2-bdb3-f3930be95b61", "indicator--c230c616-9b16-47b8-a80c-285ca8c9adbb", "indicator--9c586d90-a28b-4a89-a6bf-8e7eba939632", "indicator--2e392d2c-7e3d-4ebb-a800-b4894afab4b8", "indicator--8fea2f15-350a-4d48-ac1e-21a71626235a", "indicator--408bb07b-6702-4b02-bb93-b43de24988fa", "indicator--0c7ba793-2def-4582-a2b2-c0cb546b5cac", "indicator--50b5b1cc-8249-4498-8af5-bcff36e35fac", "indicator--4ec28ca7-2f6b-442c-8bfb-8281a19cba79", "indicator--e71a52ea-8fe6-45a0-8016-06197e59c933", "indicator--68a9cd13-b57a-4716-a0ed-1377acbaa530", "indicator--9d8c69cf-3d60-4aa8-ad7e-f4f562b2d3a2", "indicator--03628a3f-d4ff-4697-9fdd-c477e5d1fbe7", "indicator--97a0243f-d72c-4ab0-aa75-9f1357fbdf94", "indicator--02fc388f-b0cb-43b2-91ea-20d90b07bc35", "indicator--e03ce883-ce1b-4722-983a-2d6ffe954628", "indicator--2c9781cc-850e-4614-9b26-b79bc18a06f9", "indicator--9e35373e-b5d8-4053-8a6a-46186c9fcffc", "indicator--b6739b0e-bf9e-4a91-89f9-2f27db879aa3", "indicator--b997857e-ba6d-4749-aec4-2effac89711d", "indicator--d5c20ac6-0b90-4c79-b633-3db7294cdf57", "indicator--cc170207-593a-48c7-8ac8-aaa48a2bfc20", "indicator--e130d10f-f8c3-4cf8-b951-eb97aff847d2", "indicator--a142f883-d55e-4afe-adfd-bbd63b3e594c", "indicator--761c8f99-f5c2-4b64-8c9f-1c2e142c0118", "indicator--bb0501de-fdf2-4c2b-92e9-dd10bf6544b0", "indicator--1ed10b38-53b9-4f6e-9b40-ecfc4e24c702", "indicator--e98b02bb-0316-4bac-aaf8-2964a566a1d2", "indicator--66573e67-57c2-4642-b0b2-19cc6c9563df", "indicator--0cccc966-44d3-4459-be96-6d26fb40fd0b", "indicator--ed14ccf3-b7e4-43e1-851a-97504d34d62e", "indicator--a25db202-082e-4b5f-93f8-e6af189ad0fc", "indicator--93d30a4a-2a7a-4fd4-830c-7bae4dc23b3d", "indicator--e15378a7-4fb0-44c3-8854-dd867ab37cad", "indicator--2e09ac70-1c32-4ed7-8816-b606fedc1fb3", "indicator--a30665d4-7171-42ed-9614-a2344838165b", "indicator--4082206d-7675-407d-9ac2-3fd537a2ed4a", "indicator--15bf17a7-9d09-447d-a23a-a6469efdcba0", "indicator--625ae6ba-52b7-4ba9-b89a-55a137bc3c69", "indicator--53040ecb-cb35-4bc1-995d-b0b9fa0b2a0e", "indicator--e1a5ec99-6b54-4e46-b5e7-877b55a21ad1", "indicator--b7456d6b-a6e2-47d1-9f56-aa5e1eb85723", "indicator--9eea099b-72bf-45ef-a809-548962ff8f4b", "indicator--d94d23fe-c15d-4d6c-b7eb-ea761544eb97", "indicator--8a6a2c07-3224-4db6-a1a2-38970b7d57b8", "indicator--1d89686d-b070-4160-be26-a4c8a57eb8ec", "indicator--823b4e38-9644-4177-a83c-f182b1ecc1b6", "indicator--6e5b815f-1a90-418f-bf66-1da1bdc4680c", "indicator--a5c7e9e3-a7eb-4921-bba6-f50de5293132", "indicator--bcb8e142-2526-47d6-9e47-c05ddfb166a1", "indicator--ce5a9580-2c73-46aa-845c-4b7d58cd5bde", "indicator--40b08a65-61fb-4b03-a98e-00d61dc17d7a", "indicator--2234a7d4-ee2f-4730-a1dc-53f5cfafa766", "indicator--63a07fde-e5f7-4428-b74e-b83532e6da14", "indicator--577d80c5-9613-46fb-b703-554ba61edd5a", "indicator--7c23cffd-46d3-4ef9-aad0-97b23c4f3e10", "indicator--4d9bb9c7-c1de-4008-9d5b-2216bba70991", "indicator--df96cde7-aa45-48fc-9069-708515600830", "indicator--89500de7-067c-4a18-87c3-deb84f37d05a", "indicator--3a2b6626-68a7-4451-b7ae-a7902c4e9fb4", "indicator--c070ffb5-aeae-43c1-b381-387a8af056f4", "indicator--29f58eed-8ea6-410d-87b1-1022bd411b46", "indicator--91518bff-584f-4288-8124-bc3a36bf3029", "indicator--e5f75a06-ee37-42d8-a23b-ee497ccd7f3f", "indicator--3b79e8b6-ebfd-4cc7-96c8-6d64acca3aad", "indicator--55c844e5-f7e7-47f5-99bc-6bce74be1fa4", "indicator--1733eea3-a1dd-42c3-aea0-62e6e3873694", "indicator--37765194-94d0-412e-b05a-ebad1d9fe919", "indicator--23b20662-ecf6-4654-a193-2c9e8f11ebce", "indicator--f354354a-c372-4a6b-b072-08e0812699d4", "indicator--66fc7fb0-b3ff-4a63-b96a-870fe5d08e7d", "indicator--a89c96e1-2231-4111-9e92-c78fa34da9d3", "indicator--6432ed0e-8a54-462a-862e-3a42b1dc8b65", "indicator--1f5690ba-76b4-4d70-bb6e-489008e90047", "indicator--bf78d9b6-4d97-4056-9cb3-dc223a64c741", "indicator--1c45f959-9fe4-4c3b-b328-32428edda8c8", "indicator--983f8a4d-c0c2-486a-9fa8-fb265d916e9e", "indicator--230b07f2-03b2-428e-b853-13853447e677", "indicator--fd3b15cd-002c-4076-969a-31c29cb51782", "indicator--e6f1bf91-bf22-4a63-95c8-4596e46f6a13", "indicator--aca569fe-4b18-4cc1-957e-34c0ae44ff05", "indicator--c8f9afb6-7601-4236-8226-279a85c45274", "indicator--0e0d3605-d06e-4dcb-9eb7-eff1a94f9065", "indicator--8241319c-7618-417e-a824-1b2d9625df7f", "indicator--6068632e-299b-4299-8d45-f7ba052c1c35", "indicator--87a6d383-bfbc-4de0-92db-749fb11b8a7c", "indicator--e10597ef-b0d6-4fdc-9db6-68cae540abec", "indicator--cd67acc9-d1b0-42c6-8b35-49584f44cbf5", "indicator--3156e0e5-9caa-49bf-9bfd-c57fca63a02b", "indicator--26e64b50-8093-444f-8cb0-75b704adf2fd", "indicator--e4fb8f86-3828-4645-8b3c-2518cf23e309", "indicator--58720ccd-8e90-45f3-acd6-f7d08fc412af", "indicator--7b127d40-98a3-4e06-8007-e6f6b5e2402b", "indicator--f8639865-ee8f-40d1-984d-bdae3d19b94c", "indicator--332a48ae-5b01-41e5-a928-73f234a91e56", "indicator--9f283f60-a46c-444c-b0e9-fe521c794b25", "indicator--bb4941e4-d0b3-4ef6-ab85-8beeec03cd89", "indicator--f41aa40d-34bc-4b98-ad35-a519b91bdb12", "indicator--63d46db3-9c0e-4594-9f40-91be789ff895", "indicator--424fe2d2-40de-482b-976c-ab135bcd79e5", "indicator--cdc7e6dc-97c4-4a17-b94b-fa0b8dbc0311", "indicator--27b72da2-5e36-46d8-8dab-6621a1a75697", "indicator--16767bcf-ca9e-4fae-8dac-1a2419057d89", "indicator--5af4882a-b04f-4820-b27c-dd967b48c69d", "indicator--e2ba570d-b12a-4e1f-b82e-5fbdacb8f280", "indicator--3440d0d1-f0f3-4b32-a0e9-5bfbd5e22e37", "indicator--b5fc8757-a5ad-44df-837a-af8c44073ef6", "indicator--418f34f9-ca31-43e2-a7da-952a3deeabf4", "indicator--dd357cb1-9210-4403-ae1e-6af704a7999b", "indicator--afa329a4-cdb5-4f19-94b6-bcc97b3e65bb", "indicator--53afb861-7c38-49c6-87c2-8a6b482ac4e8", "indicator--8bd960dc-8734-4c82-88f5-d81bf84e0ee7", "indicator--ddf0a874-2560-4aba-ad53-30b9250a0436", "indicator--0719bb86-787b-4d7c-b99b-f7a06ac51320", "indicator--370161fc-c2f0-4420-87ad-610751eea1d7", "indicator--611eb19a-3b3e-4db8-9954-505350fd28c2", "indicator--63e8a4e7-bef6-4fe0-96e8-d812a8dbc03a", "indicator--544c0ca7-a108-40c9-9d39-9b5cb3a1e682", "indicator--2e30fb4f-6c5f-41a8-8487-ee544af9ec86", "indicator--7c98eb82-3583-4ace-b5de-22d8d189481a", "indicator--7eaa6abd-c5b7-45ac-bbf3-640ce79f0752", "indicator--e5f6790d-d674-47ad-b14e-382dd2b42740", "indicator--3589097c-4ce2-47b4-9f29-16e87cab39dc", "indicator--ce334597-762c-4dbf-b09a-832ebbfb55c1", "indicator--22d27451-e9c3-4e89-abfd-ef4362ac1f48", "indicator--66db2986-be33-4be1-aa11-36742f3807f5", "indicator--8fec963e-b08c-4d5a-9836-dac515615123", "indicator--d631686d-2b62-43aa-bff1-f61d5976f381", "indicator--30a84ce2-05d5-44c1-a059-a7fc5c46e5c0", "indicator--f8177b12-6c63-4a4c-aa94-773842593fa1", "indicator--9240b890-2656-4ec8-9441-627e8a6f4cee", "indicator--82efe91e-b1cf-4cbc-9b1d-237bf461d9b8", "indicator--4cf3f373-0fdb-4b64-b521-9f1a627c1b5b", "indicator--cfd30502-34b8-4793-a7d6-225a98347c92", "indicator--6c1160f7-dbde-47b5-8dd4-907dc196b1c1", "indicator--5b5c268c-d446-45c0-b3e8-ca7cdcd378bc", "indicator--45368933-13a5-454d-9e8f-21f012c559b0", "indicator--ba688d7e-7996-4da7-b5f5-7d21ca5dc985", "indicator--3207e2ac-7aad-4cbe-8607-670964af37da", "indicator--a9b6c26c-52a1-4fda-87da-4f24d5899030", "indicator--89827738-8a17-4e32-bbdb-a91b82d2160f", "indicator--1c348b70-61ae-4ee9-9f79-2daef4c9ffe2", "indicator--08f692cb-2a26-4511-bbfc-62e61e1835c0", "indicator--edab1768-065b-4ebe-a4b7-a84144a7454a", "indicator--b6db45bc-bad0-4f59-af1f-3fae85cb98b7", "indicator--45595fe9-5bbe-4cc1-bd54-c16d43f54400", "indicator--f64a28e5-308d-4092-9570-e33fa2c12c49", "indicator--31dd8ded-0ecd-492e-bc23-c2348bc47a69", "indicator--745cc5c9-faa4-4911-b8a6-e59f99b32915", "indicator--c13a0438-9694-46bf-9eec-611b32be3ce1", "indicator--f4584955-5072-4e72-a7dc-4f0bbc72514a", "indicator--270b96f8-cdd6-4059-87ed-b2e1231d0746", "indicator--f3fed692-3107-4353-be22-7f2a27834668", "indicator--3a8b1a14-d2d2-4aa6-bee1-7144ac820e36", "indicator--d805054a-e399-4d55-926a-496ffa6f889a", "indicator--49300645-c87e-464a-abf2-a8037ac1d85a", "indicator--fbf977b4-5b5d-4658-b2da-d4a23ff8c67a", "indicator--2e592b03-e7f8-49b2-b213-a3a4668e0abb", "indicator--200969ef-9212-498b-8c0c-ef5ef8860a30", "indicator--cad990cc-db06-4846-9853-795f54b4bcab", "indicator--52b9fea0-0d95-403a-99fb-855bbdb3baaf", "indicator--1ecbbaa9-82c6-4dfe-8467-0abaa1a426e9", "indicator--6b0913b6-78ce-4d05-9b00-4df7268e8eb4", "indicator--5f4f2e8c-223c-4e71-b1f2-85a3521559a0", "indicator--43fe59b1-dcf1-4f84-ae47-09272dbc78f7", "indicator--092b8d27-96d2-4c8f-8665-76c56222879d", "indicator--4bca2841-7163-4fe2-88cc-fa306a10f440", "indicator--5ad261be-8e8c-4fdb-9091-d7715f77ec59", "indicator--beaf9d1c-4160-4df9-8d64-7fbd5d39a325", "indicator--9b972ac5-e325-4c74-ab91-ae6ca999b223", "indicator--e87dc11e-dd36-4118-9dac-2b010927765e", "indicator--c4c1c939-8251-4cd6-9b4e-4ad9ce70fec2", "indicator--1f4eeec5-4398-4a2c-8195-eb928b8a3ed7", "indicator--01b4d4e3-1e48-4bce-b587-0868c0c9aae2", "indicator--d86fbf94-a5d8-494f-b95d-66a11036d8a8", "indicator--aa1fd15a-9ca6-467b-ab9f-67f372a9f0ce", "indicator--c1f53bff-789a-427c-a3f4-f0db15a8c6e7", "indicator--9f64ed38-ba68-48c6-a202-5dfd186b947e", "indicator--44b49381-96de-4197-94c2-d7e43d8aed9b", "indicator--18f34fbf-2ad9-4e75-a5b8-9b2ce3f90b37", "indicator--8cc97964-f733-4511-b582-07e19749dc02", "indicator--0b308eab-ec56-4542-9580-4792633d27e7", "indicator--7b159038-e6fd-407f-937d-9ca1327cb642", "indicator--b989b57a-eb36-4b03-8318-59a684b3d882", "indicator--f1148036-9868-4edc-9ab3-c96267ae91fd", "indicator--34c20f00-1ecd-4f0a-a8cd-99490cc00995", "indicator--8ccb37f8-3f37-4bf1-acea-dda866e2f778", "indicator--d7d4d80d-5e7a-4681-a359-6438712a4589", "indicator--511d1f99-d2ba-4584-9da8-6914211d91cc", "indicator--5ffda9a0-68d6-453d-977d-52cd86fd2f90", "indicator--a072af46-199b-4773-a8a7-7a03204b2f1d", "indicator--086fc164-7ee6-45b3-b6a1-d846e4fb63ce", "indicator--5662afad-b653-492a-9331-a46a7bf1298a", "indicator--05a44723-66e5-42a4-8619-c1a4fe8b3e9e", "indicator--8f05bbdb-15c5-44fc-abf4-5d919d705873", "indicator--713bfd4c-71cd-4e2b-ad44-d06f140fb7cb", "indicator--7db0c311-69e8-4e1e-82d8-705438eab4e8", "indicator--7ef7eced-f5a6-4804-92cf-40505000a177", "indicator--4729b500-4dad-4568-99e8-0c604e53230e", "indicator--b1da2f23-6064-40f6-8602-356eccb2e1e9", "indicator--c858c807-2263-43da-b9bb-1138785f8b60", "indicator--d00e880a-b8e0-4387-8923-ca20800b9baa", "indicator--7a9b3016-baf3-4673-8ea4-0df248c6c95c", "indicator--2c5c482f-f5ae-4e0a-b356-0bbe38ff0708", "indicator--f0b68552-9190-4dda-8e70-dc1aaaff1f85", "indicator--df47449f-03bd-4703-bd8b-4be99ea7015c", "indicator--e56ed696-7c50-4f46-8305-6d4d4cceaa5f", "indicator--d5a2679e-d9b8-4b3d-bd0e-3a9a02f03ce7", "indicator--75fb75e4-1d2f-44c4-bf25-ebe00f2f3a5d", "indicator--9d2e9fe3-57fb-4b31-b9f6-05e7b98170a5", "indicator--763bd346-0d95-47c8-94d2-24823ccd8198", "indicator--cf0898f5-0114-4180-b1bc-be2ce26dba24", "indicator--df3143c3-a490-4065-8094-f6a00ecd31a5", "indicator--62189418-bb02-4408-9281-5892ff85bc14", "indicator--eeee48a8-264c-4ed2-8c9a-c927b3f27aa6", "indicator--ff8d1860-1b6c-4d39-9a2d-10c4e9cb2151", "indicator--683ab11d-1800-4ea2-9373-35ac991b65f5", "indicator--35682f2a-c060-4ac4-a909-4b7042c1877c", "indicator--d98c5e5b-bac8-42c8-b76d-96c9e5d6018f", "indicator--45f58658-216a-4b65-8ca6-f507172ee5c7", "indicator--e3a2c7b1-05f4-4a29-a036-ca689371a180", "indicator--8be91f6e-80da-423f-b67c-5d16cb6f707b", "indicator--4b5e6b85-3a61-4575-a3d7-1f9567f04cc9", "indicator--9d776b37-b631-427f-bae4-a34c6a342c42", "indicator--efe62a20-c49a-4de3-96b7-712296276aa1", "indicator--ddd98e0f-011a-432b-a21a-29e0799a108a", "indicator--674ab037-68ee-4ecd-ae42-2915af6e56eb", "indicator--90248267-72c9-403d-8847-c359461ff03d", "indicator--f8235c8e-1cfa-49f6-bd8e-702330a7087c", "indicator--41cd1036-5b7e-4533-8739-28c65bccf19d", "indicator--c087720e-25c6-41cb-a438-cb380c72ba1f", "indicator--42e6dd89-9965-4dc2-ae4f-ac4f90b72904", "indicator--3912164a-8b89-4e74-ad90-9283e9e50f6b", "indicator--f7249f1e-462b-455b-a967-29358f70a622", "indicator--b5e826fb-edd2-4902-9eca-644c1b7d152e", "indicator--c38bbcf0-2db3-477f-a2b1-7526fa8a9f1b", "indicator--200ec156-c823-4629-b7ea-2564086d10c6", "indicator--47a6cab7-3cb1-4d9d-aefb-7c80e0a73a85", "indicator--1eb856f8-93aa-42eb-bc6b-18512eb6679e", "indicator--88a840cb-8d36-4253-ac18-473dae1d53cd", "indicator--1afd4872-0152-4644-86bf-f333ad5b902b", "indicator--0c68f6a7-5b33-48e2-a903-4973f08ed30a", "indicator--485daad9-595e-480a-8d7b-5578a36ce021", "indicator--4e5ba8b9-c810-45ab-9e76-0a2aed0a9bf0", "indicator--27acd2ba-8388-4ae4-807c-a9c1683f27be", "indicator--7426a62e-0eee-4466-9a44-ed1658a08121", "indicator--196e7dc5-b611-49de-95c0-0352316310dd", "indicator--220c0cc2-06cd-4ce5-bfdf-86aafaa34334", "indicator--d120054d-6dd4-401d-8ecb-0e55f9c719fb", "indicator--640fd101-fc7b-4d01-925b-19e0207b2a0a", "indicator--e12fedf2-f3c1-4c3c-b359-c106de75dbae", "indicator--a1651c09-3c9a-41c9-ab92-1cdee065cee3", "indicator--96cc3650-472d-4e71-b8c3-5c1284301c07", "indicator--90ca403a-5abe-4c54-81df-d704701ba626", "indicator--172e0d20-8987-413f-9b6a-7fc53c31fe7f", "indicator--864a77f9-382d-46cb-a0db-de8f21716f9d", "indicator--bb1d153e-72d2-413e-8b97-2963e5c7d357", "indicator--f90ce9ab-efe3-46c9-b396-d892d52cb937", "indicator--89e50f07-ad8f-4fb1-bf7a-4896623a17c0", "indicator--14ee5095-475d-44b5-80a4-569beb28611c", "indicator--3a839b9c-1ad2-48f3-baa2-924cc99df640", "indicator--2c615005-dd3b-4893-a712-3c7ca125d4d2", "indicator--1c7cb667-6726-4b3c-9985-08953902b9db", "indicator--dac51963-af7e-4199-a972-3bd50d3d1f7e", "indicator--c70695f1-c189-4d4c-905b-cb87d5cc7386", "indicator--820a7a1c-aa20-4f02-a9eb-17b7eea42f67", "indicator--02647a63-b7cd-4486-8d40-e7acd2bbbec7", "indicator--fcc609e5-3806-471f-a79b-74a9ae8e8c34", "indicator--bd116594-6ecf-4b10-9000-5db6fa099580", "indicator--097ec1c4-ce53-480f-9e4a-a61d87268918", "indicator--9471ceae-a1b1-4790-a784-240147e4c193", "indicator--f9545b7f-d910-4a7d-95ba-8afec24c230e", "indicator--0d6990ba-5108-4c86-a8e1-122b3d993c9c", "indicator--ba34ea3e-c6f7-4d55-8ed4-db836b94d24a", "indicator--b744bad1-0df8-4d52-ac1d-60b305dd2ca8", "indicator--74e6a0a1-c60c-46e2-8b27-80e1619e37cb", "indicator--4e224011-cc80-4255-917e-f772ccb6255f", "indicator--62c8d453-9c57-45bb-b1f3-4c877c374c58", "indicator--786488a6-e3e3-438a-b1a1-7f120061da86", "indicator--b4171aea-423a-48a0-b0c2-e22c02b3ddf8", "indicator--28c07904-c64b-4884-973c-31c239f5b435", "indicator--727e7677-8405-431b-9f74-e4033a20f8f6", "indicator--fd4649c3-3c6d-443e-8228-d9cdd04196a4", "indicator--8e473c5d-8366-45d7-b23f-ae8763097021", "indicator--14c5a853-fbba-4b3d-a4bb-5781734793bd", "indicator--7a9d42f8-bc1b-4071-a1fc-9e54407d3051", "indicator--ae0f472d-71e5-4bd1-b89a-b6c527d93f1e", "indicator--77c2c8fc-c703-43b8-845d-6d91f2ce6efe", "indicator--fb42d13e-a7a2-476b-99aa-37773395f1ae", "indicator--b71a1679-5c41-4e21-a285-c2a68158adf5", "indicator--8ea9885d-8ef9-4c5a-aa4c-40ae4946edb8", "indicator--6ec7b802-b240-4f89-8ef5-b0b839720e4e", "indicator--ef4f3c39-ce06-429c-9c82-3d2a010ee7fc", "indicator--d56555a3-fe20-4cff-9ab2-dab62fbce667", "indicator--801764dd-678a-4e62-82d9-ad180cab8ef3", "indicator--ddc79f96-1433-4624-8067-fb04defe6f90", "indicator--5e3c8c70-0401-49d9-8f35-c8ed98f02bf9", "indicator--31bea373-9098-414a-9ebb-9f1b1e03a892", "indicator--9b2d90cd-70be-45b6-9790-917dba10594f", "indicator--046a40ea-47d5-410f-9a8f-6ea515451cd6", "indicator--25b43f4a-f1ef-4d09-b211-14c81fcc80d0", "indicator--321d3873-703d-4ef6-804a-d16c454fa186", "indicator--891fc50c-1925-4ae6-936a-56e54c20ef3d", "indicator--227615ee-edae-4729-9233-705a3fccfe67", "indicator--c63e95a8-ebae-4787-b00d-a18866d972ad", "indicator--29ccefb1-9315-4d28-8734-23f610c080cc", "indicator--a9ac42fd-6c92-4354-b96d-2a81256485ae", "indicator--557b8ded-feff-4407-97b3-5e45f771f11f", "indicator--14a8e108-0940-4d9a-8434-10fc1a4e4158", "indicator--db947d05-642e-4fbe-88d9-56893acb9b2c", "indicator--6bbe198c-71a4-42c7-bb1d-3b4c368dffde", "indicator--ffe6b0c5-090f-4e1d-872b-5134e2bb2b9d", "indicator--d5ff1655-ae8c-46f4-960e-6ff79cf14a8d", "indicator--a1a18b5a-e0e3-4568-8c0d-4bf658a9d90d", "indicator--c78f9bf2-47b6-40e7-b4df-244ca234d6f3", "indicator--3c3e85f7-373e-43b2-9365-167f02bfe8e1", "indicator--9f84b4a7-a651-4fbf-9e97-a0ed3ad20626", "indicator--f2360b97-a6dc-47ea-8447-026310be5bb3", "indicator--e07957a2-c485-4c5d-b413-72ed88db10a9", "indicator--81673191-cbcf-45ef-85a0-b09c409f484c", "indicator--bd4ac50d-ec7b-4a5a-9d06-b6aa623f002a", "indicator--40aefcc8-66bd-4190-98b0-5555ec8ea34e", "indicator--d37df0f1-c05a-426c-85a3-b7c54fe698e4", "indicator--507e5cc1-4755-4da4-9cfc-e15cb4a1a92a", "indicator--ac940262-f53b-4c3c-a8da-d322031f678f", "indicator--b8b63f59-4515-41f2-9dd7-d649eaca73e1", "indicator--7acce88e-cd81-47e3-a10b-0e2f72e2fea3", "indicator--5188345d-cff4-4814-817b-671aa899e0d3", "indicator--feaacd2f-c5ad-4046-aa04-2f0522fd1d49", "indicator--5bb54fdd-0830-4533-8814-f5870d745e66", "indicator--fbdd894f-817f-42ac-a30e-b76dad385adb", "indicator--f30be8fc-bb1f-4f52-bdf3-0f6abf7baaaa", "indicator--c8213e5b-7723-4dbb-bfd4-01fca7d993f6", "indicator--b38f9b30-0f4a-4178-b6d0-077eb8627d93", "indicator--e5f4d424-3b0c-462c-80a0-e5ff7b4aeac3", "indicator--aa4152f7-bb08-444f-88a8-08a9cd5cf96b", "indicator--55c72334-50bd-4570-912e-48d3cc35d75c", "indicator--5fd712e6-3779-4bb6-81a8-588e1a8d35b3", "indicator--94ad6290-a5d4-4295-850e-a638941df4d6", "indicator--91b959c7-69ec-4fed-be5c-08e04d205123", "indicator--51acd102-24f9-4f4c-a679-de5a3d827588", "indicator--be0d53da-2744-4404-bbc1-fc0957141c40", "indicator--53568603-ab88-4517-b4a8-8b821c6f26a1", "indicator--3fab9da0-ca16-481c-a593-6a47a74abfe9", "indicator--639332c3-ab47-45ff-b62e-23fe42881a1d", "indicator--d7529754-ac72-4b50-be37-375aea7acea4", "indicator--4124f382-310b-4a0e-80e1-264f505114f0", "indicator--64f3612d-9d21-4d11-9000-5bf22c0f56e3", "indicator--421cc615-b4c4-4732-923d-2acfd01fd278", "indicator--3dea86de-f8a8-4120-81f1-f3a60d07008b", "indicator--335b65d0-2bfc-49a4-9dd0-133ee67c72c6", "indicator--2339835a-2425-4ff1-97ea-481bd59104b7", "indicator--391e7786-35d2-41f1-a628-e3059d654968", "indicator--fae3253d-4032-4405-857b-728237a81165", "indicator--1cd00419-d662-4043-9c87-d9a96c1142a2", "indicator--88c94753-fca0-4699-9f81-64aa97e3a558", "indicator--4d300617-0502-4715-adbc-cfd910eb9186", "indicator--558f1d11-5504-4eeb-b1ea-bd3ca92da8c9", "indicator--78b61aee-e0a6-4e8c-893d-977bb4f10675", "indicator--1bda115b-f097-4576-964d-5b00db62be57", "indicator--4661aaa3-be4c-4432-8ba4-e211161982ba", "indicator--39d1bcd1-8497-416c-8517-defbe9c332f4", "indicator--ab9db779-5f7b-4f78-bdc1-6c6f5b1d8610", "indicator--8868ddb8-908e-4805-b933-4f42e8e36949", "indicator--4fddda5a-d052-4865-963d-86f18cd2bea6", "indicator--b3032a63-9fc6-4ac4-a704-aa061f84a852", "indicator--bad34c67-fad1-45f6-9916-edea1770995b", "indicator--17d893e0-615e-466b-826d-53777bf02d83", "indicator--e15792a2-5d54-477c-9426-c65aa548ce58", "indicator--b4ad2851-127f-46bc-ba0f-6227651c110f", "indicator--2004cff8-1bc3-4175-b16e-ae550c7cf61e", "indicator--8aa4d153-6963-4f65-b090-5c48fb6581dd", "indicator--3d391fff-ca02-4b8d-8123-aec7ad290fd1", "indicator--70f956a4-27c9-4ecc-a1fc-4d72a725a8e7", "indicator--76bc6cc2-8206-4c8e-806c-bbaca9d3674d", "indicator--5d77d2c8-6cc1-46ff-81b0-0bcd3aec872c", "indicator--4a73bd47-cf1b-444d-9a13-524b572f1729", "indicator--d5b5babe-ae92-44e4-8360-49cde22cb69f", "indicator--1dba7e67-95b7-43f2-bf77-a43abd40c0e3", "indicator--c935a048-8c55-4b57-9f5f-6dfba8385388", "indicator--17b48559-d1f8-48b6-9072-2969003d1a64", "indicator--0c3b79d2-2741-4a13-85c9-5380f31f5f45", "indicator--a4e820b7-9bc3-4161-81f1-f7edb8e42e90", "indicator--c7ac9336-c0f2-41a0-a443-64bf23d3afac", "indicator--2207fb5b-c47b-4423-ad52-e40b1d94c8a8", "indicator--6d4b1435-9bcc-42d9-bd39-d7d1b74c2d54", "indicator--c5b9b4a2-ddab-43a9-a381-84e346d50753", "indicator--64659f83-f819-41aa-b205-7b7d29383b5d", "indicator--3c15319b-2129-4c85-9b9b-3b1f5d72ee6b", "indicator--89745477-42b5-4978-ab60-e024a54f2af9", "indicator--a9000a5a-78bd-4c8e-b722-f0cbea81f5cc", "indicator--aadbf092-878a-499d-a6a4-1af68d400a9d", "indicator--ffcb9c37-af95-4a11-98c1-a5a0e2d20636", "indicator--32dc9b96-12fe-4016-803a-386d72a0798a", "indicator--35ae8974-a2c6-433b-bccb-e086c6aa2984", "indicator--f591059f-330e-4083-954e-a2d5dcc4ea70", "indicator--5273df06-abbc-4855-88bb-db98e0dcdc93", "indicator--8baa2bb7-2a6a-4bb0-aa6f-52afabac9ea6", "indicator--72425a05-f25d-4b86-8f45-4cac8f485b01", "indicator--90a09b26-381f-41c2-a15b-42e1217bbf40", "indicator--0e975191-1e7a-498e-9d55-702dc23ca04d", "indicator--6ebd1365-00c6-461a-b48a-b13d5dc8e2d8", "indicator--06b4dfa5-5597-4b39-a472-bf9dfeb8745e", "indicator--e310e1b5-2ce5-449b-926d-b5a13844da38", "indicator--072584b3-f26b-460f-bff7-7be76ab23a4f", "indicator--6a792003-9601-4afc-9ad0-beae4879a531", "indicator--e90f075f-b16e-4c0d-93a8-4feab3c2556b", "indicator--f6831a43-3d03-43c0-a619-d75e8d21a94d", "indicator--5d74645d-bea4-4cad-bbdb-b3f36610ce03", "indicator--63a915a9-e426-4554-bbfe-166978c8c621", "indicator--8aa87757-4685-4e50-9d9c-3f96ea8b129a", "indicator--dd25532f-07a5-4a04-a184-36dc81821907", "indicator--a70d748e-ab1b-4876-9973-0223ec7d8a05", "indicator--4556b512-b972-4899-8e59-10bcb7b79f18", "indicator--0378b530-be18-46ab-b621-92fad0c2c7d1", "indicator--2e4c2aab-0cb9-4a1c-9c37-0b3ebed894e3", "indicator--18d5f09a-5be4-4e41-b5f8-ab9812c82ee0", "indicator--13a406cc-2986-4584-95b9-d1e149596711", "indicator--38edd4b2-d20e-45e4-9c1b-66a58e19b215", "indicator--c9a23edc-6195-4bfb-b5da-95f87d940829", "indicator--26e47ed3-e26d-4060-87e1-0b777fa16081", "indicator--e2ed5458-da92-43cc-ae59-6758e2de4ed6", "indicator--c5256bf9-488e-4398-abc2-bffae168e7e8", "indicator--5afc4e48-1ebf-4db2-b58b-74431ba30953", "indicator--b3b2c35b-609b-4af3-8085-5a70c2f0b046", "indicator--ac1d966f-32b8-464b-9411-8787a9f64425", "indicator--d7f60f98-aa0b-4ba3-ab32-5dba0b301681", "indicator--b0e97207-8eb3-45aa-a8e7-bfd8464ca78d", "indicator--e4175eaa-77ab-43b8-ab01-38aea89234c9", "indicator--6ea0ec8d-2a7f-4e65-9a00-2383f879228d", "indicator--76294944-25c1-4b77-a01b-680d5ae7d5fe", "indicator--38771bcd-3bbc-440f-a9b7-2119bf5e9bbd", "indicator--a65eea94-c352-4304-bb7f-9493dc4da8b1", "indicator--f80be674-1566-4876-82e0-fa0ec33aa59f", "indicator--22446f9a-b202-47a7-8ab0-86d0756f5bca", "indicator--17ea93ae-3b94-4c2b-b63c-7ec3bfdd0e2e", "indicator--9dede130-c784-480e-a0d8-1f5a4388cb3b", "indicator--a94eef22-3b5b-4f00-85db-ce2a88fac752", "indicator--4d58b941-f393-4e1f-828d-f4c4e568ddc8", "indicator--1866a2ca-6ec2-44fc-82b6-8c84b3dfeb83", "indicator--993f2a9a-11db-47fe-8305-25cc6ab20271", "indicator--d93cbb3d-5ac6-4f88-ab26-5aa0dd667698", "indicator--161f38df-e8e3-4d96-9233-062edd1219ed", "indicator--dad86b6f-00a1-49aa-b195-997dc4474ac7", "indicator--cd9b9cdb-c673-48eb-8e33-386af3b6a982", "indicator--e6d2bdb8-5538-452a-beaa-bccbfea79ed8", "indicator--216b3247-9dac-4f3b-a7e1-457366118424", "indicator--10f0fdf1-e2ca-4039-9084-45ca1b1a342e", "indicator--eb3406f4-3ad6-431b-a08e-6dfc6749c139", "indicator--1d95b3ab-1cae-467c-8c2a-66bf03c07b91", "indicator--4b8bb8a9-9e6f-4366-b227-fe5b0f3bebda", "indicator--5e929e0b-6a67-4813-8873-ad181fbd68ba", "indicator--dbd211a8-36da-479f-8d25-af3d63e1a097", "indicator--717bcfd1-912c-4cab-8020-fae9f23cbc3c", "indicator--efa327da-e973-48b0-9723-02a25d8d5442", "indicator--d3de6d89-c54e-48fb-af0f-9bb03e936f08", "indicator--3501388d-e39f-46f7-8bea-8a9447c5c592", "indicator--905e8fdd-dc8d-4932-b4e8-8de1fefb73b2", "indicator--fd0593c2-5170-4bc2-bf9c-04b1ca4d31f4", "indicator--d3d370ad-06bb-4b2f-a546-379a2c4083b6", "indicator--4d7b17ce-a53d-4378-8ab0-de16f5b1f8e5", "indicator--48381dce-bf8d-46a6-8464-5b6434bf3165", "indicator--e06f66a6-b38b-4e64-824d-9262985e64c4", "indicator--1d70abdc-94ad-412a-8ddd-4107292cc710", "indicator--e0ddbd97-faea-4f44-8dda-4c2a79882581", "indicator--6a14d3ab-05c7-4b3d-84a4-81d76067505c", "indicator--c345e340-ea5b-4a1f-a92a-aeaf61a4560e", "indicator--eb5b0749-57d4-4212-a2b1-132a9efc802f", "indicator--fb9af76c-892d-4bb9-9c7a-0d416f308e77", "indicator--6282a754-2348-46e1-a9a8-1120c4b2ec8f", "indicator--1df78909-a1a7-4ff0-8cd4-776bf45838d9", "indicator--2caa1a7d-269d-40e9-be58-62e162fd30d7", "indicator--29e3e012-50a6-4504-93a3-a7b27949feeb", "indicator--3dd5846d-a78a-45c5-bb77-235f4a9ed92a", "indicator--6eb42d12-a4e6-4fc7-8b31-745f052e6347", "indicator--22efec40-c81e-4ab0-a4e5-42dfa42d0207", "indicator--924b755b-bfc2-49cf-b6ad-48b818d5b3a1", "indicator--4b281434-2659-4393-bee2-bea11f1ddf4c", "indicator--4da2512d-496c-4618-be03-5aeb855f445a", "indicator--feb888c3-c06c-402d-a85d-072b474e00e9", "indicator--844a9e28-1b33-4581-b43d-9c8d241a8cf0", "indicator--47c1a436-e40d-4746-863a-e7d733adf705", "indicator--b434ec15-6aa2-40b3-9a72-502bd8dd1a19", "indicator--09070552-39ee-4bbf-b4a8-df0df2a99370", "indicator--d3960e27-ac9b-40cc-9c19-33758d6fb725", "indicator--fa996781-5d39-4abd-8b59-a333ce3ca489", "indicator--1584d21e-fe35-4395-aaa3-0725d76ee813", "indicator--a2491320-f2fd-426b-ba9a-04acb39e57b7", "indicator--45b96351-7639-4ddb-ae41-175463c7af99", "indicator--d06dc5be-50c8-49ab-9040-87f69ff5ca79", "indicator--1b399126-b806-47fc-9821-8f47bccdd036", "indicator--f286d677-15d5-447a-b583-dedc4e9d4cd3", "indicator--1d71b957-317d-4f5e-bd63-1db654c7bf46", "indicator--56e410f3-3259-414e-8bee-bf562a675206", "indicator--c0a3ceb3-f45a-4478-80c6-81748b2eb1fd", "indicator--a072b04c-ac50-4c4d-8af4-b0b143ce60a4", "indicator--1f967029-976e-4840-8de9-91b35e79b664", "indicator--758f871f-d37b-4324-b1f0-d6d77acf6ec2", "indicator--af444ef8-6c52-4897-90b3-a7fe74ab2b1d", "indicator--2f811256-0b6b-45a1-98f9-e024fe6b8b6d", "indicator--5f41bd70-c2a0-4b66-9c39-1c45f313df7d", "indicator--b1628c83-9594-45fb-ab22-eca11ec54175", "indicator--ade54519-b514-44eb-91f3-fc99291ae597", "indicator--8c23f285-886d-40cd-b4e1-bcf35ffa01a3", "indicator--672d4093-fd67-4a21-b049-aae1ba445333", "indicator--451fa95b-14d8-4711-8bc1-b3e674ac3db7", "indicator--8aa16182-70d3-4978-8f67-4db65c1eb7c6", "indicator--83c804de-b316-41ea-86fb-1a6faaf17b8a", "indicator--9dfedd63-ce30-422a-bff9-beb25ea53a32", "indicator--0e3029f5-85a0-434a-a4d2-44ff698674d8", "indicator--cdb91280-5679-4286-934b-78b94976d052", "indicator--44d94a5d-7e8c-4fb8-92fc-f4ec2fb7daeb", "indicator--04c92727-fa8a-4409-96c9-4967e7cd4532", "indicator--564fb211-53b2-4d76-9146-70afa367e6b5", "indicator--e00b195f-158b-4e13-969c-b0fc5e1f5a90", "indicator--1bf2ca6d-4e52-43c2-8cc5-aa4923a264c8", "indicator--20d03f53-7e3b-4341-a07a-e98a2ba114a5", "indicator--02c3c246-d366-4c7e-92ad-8d69322541da", "indicator--e12d34b6-c962-4a42-84f1-974b63c9c0a9", "indicator--4a5b9d72-2859-4557-9708-87b325786521", "indicator--734c9b95-4d31-4334-9454-70c4461d7d37", "indicator--f54c17b3-36a0-4c07-9ee1-175de3679e2f", "indicator--b2d2345a-8f6d-414e-b2f1-237885ceb0ca", "indicator--bd4f49b8-1ee5-4429-868e-17176457b18e", "indicator--c1800eed-8a3e-469b-9ca6-a2fde3d2c545", "indicator--89f017cc-450a-41db-a6aa-cc3ac469e668", "indicator--4da2bb5f-d86b-4a9f-a7b2-cbbb94eb4ed4", "indicator--a68ca415-5e3e-4aa0-a084-4d0dbece8be4", "indicator--afcde428-ce21-43e2-9dc1-787843986fa8", "indicator--50376556-31c4-4c5b-b73b-d529b6c825d4", "indicator--1780a822-7d5a-4c0a-b09f-e752865afae1", "indicator--cf05bfa3-6405-4046-9339-f8195a40927f", "indicator--b1967a3d-71d2-4f7c-b9c6-79912300c49a", "indicator--ccd88a0c-7625-4592-8486-00e9d7c333cd", "indicator--5a7c7d66-bbf5-4364-81ed-850570d83698", "indicator--38610930-845d-49d9-b56d-977a282a6c20", "indicator--b32584e4-d36f-4bde-9cad-575cc21366a2", "indicator--5f53fbf5-8402-42d1-8a5d-c1ea87ff209a", "indicator--18ffc68d-c7d4-4827-bf65-3e78b70c7b60", "indicator--e2dd69e2-aef3-4fa1-8314-8bbb771396f8", "indicator--22ff826f-27c2-4969-93fa-b4de1fc6167e", "indicator--c79d4bfa-d952-4443-a9f5-a926aaed2c82", "indicator--73a40507-7220-4d83-a1d4-4138148c0591", "indicator--eb364989-40fc-44e7-a97e-f1c2fb7ba453", "indicator--1ffaf9a5-8e7c-4ce3-8266-f1fb3d188c9a", "indicator--f670f671-9d86-4669-b437-61f451dc667b", "indicator--7ef84fae-98ca-4a92-b353-03e0d8175007", "indicator--208db48c-1b11-4987-afc0-e81a32e55413", "indicator--b0bf853b-e268-41ab-92fd-c33c0bcfd9d3", "indicator--be3c728c-b8c2-4a18-9a74-22566da198bb", "indicator--f554493e-7bd7-4097-93a8-1815edea4909", "indicator--2c7dd3fd-b069-45aa-8a8a-67a792248e5b", "indicator--2b861c84-7d89-455c-b749-f0c842831580", "indicator--68670467-6f9a-4bab-afd1-f99b2bec378c", "indicator--a358a6f5-d0c7-4261-9f45-1c1e30172ea8", "indicator--aacbf24e-3b89-476d-b7ef-188841787e58", "indicator--b3cc7b5f-5948-46cd-b7f4-66ba159ba9e7", "indicator--907bb6b2-48e8-45dd-97cd-0e4803be2f23", "indicator--e11aa5a5-5b62-4a53-8a51-6577c7e04848", "indicator--3a997695-5692-4e34-95b2-ee955922282e", "indicator--cb4c6e8f-d921-4ffd-9358-0ee6e3e26e7e", "indicator--236bb460-13c1-4f04-83c3-3f3f92eea060", "indicator--f22ccefe-23e2-480f-b0b5-b771e4503255", "indicator--8fffb63d-6905-4bc4-b22d-38eca844e785", "indicator--0e7da1fb-de52-4b2a-9545-5933269e6886", "indicator--6cd52e00-f24e-42ea-8e64-a77d778777be", "indicator--a924dd58-b1a1-453b-9b23-d09cabb6b3bd", "indicator--13e767c0-68e5-4535-89dc-e5ecead2c45c", "indicator--c7645b2b-1b16-4b72-9bdf-addbf19884e6", "indicator--689428bc-2bbc-4d9c-92f9-157c73e11135", "indicator--d68eeeb1-d3cf-4d1b-9a0a-1eff46024d9b", "indicator--08fd5ac2-c0ea-4d88-9202-295cc6fc78b3", "indicator--84674930-1d92-4f2d-9dad-7b6f84125c2a", "indicator--cb077913-db4a-4f81-9b6f-07b5db540d24", "indicator--9b8d9730-ad33-4ca5-851e-0960e8b3763c", "indicator--cdff65ea-8bc3-4b82-b25d-c8bf8a2e4748", "indicator--947094b2-4269-4678-bfce-3204c89e77fc", "indicator--18e23d62-ca82-4a5d-9059-852918cbc339", "indicator--8ae8c33b-589f-47d0-a228-9b161bb473c9", "indicator--5b30b93d-e6ec-48ef-985e-68845b33d2a3", "indicator--42dc032b-5cf3-4213-b3a6-72f78ff0035e", "indicator--00fbea4f-d825-4a55-b61a-4ac2992fd82c", "indicator--a1272484-6dda-438f-9b35-8c4aad67c19d", "indicator--f1bde8b3-8bc0-4191-bc6f-904b2826ec01", "indicator--ebbed1de-2d86-4d18-af8d-5134af4d5544", "indicator--4b42f0d9-6101-4049-8c35-28f4be009f20", "indicator--6a70366e-cfdf-47f4-8488-39c452da7b1a", "indicator--621a07c5-e08c-4af6-a56a-a24e862d0f87", "indicator--2b8303fd-52bc-4f93-bfe0-46ccc1a4ff2f", "indicator--72b7a1ae-79ed-4263-a2fd-aab7ad7a86a9", "indicator--36afba57-5fd7-47de-8d5e-b0b9136708a0", "indicator--7dc49cdb-c44a-47c8-850c-1bed9b39a6b7", "indicator--a5c50812-a1cb-47b0-9a3c-9ceba8978b8e", "indicator--ca244952-ee54-4305-9633-7074439bc98b", "indicator--760710cc-889b-4da0-81fa-36d127091cd7", "indicator--c82a7815-d004-4764-99e2-bb02648c5e82", "indicator--872e4887-0fbd-4e95-8b08-4046c913e761", "indicator--5f69a272-5db9-4a2a-afdf-35636008fc9d", "indicator--95416045-c562-46b1-8129-7678e5b71f80", "indicator--ecb601e9-5c65-4b86-8ede-4ca3d379589c", "indicator--51c16d8e-9c28-47ce-9c37-cabe86110f15", "indicator--30e0d539-f75c-4158-bdd4-2318d63faa38", "indicator--d01e3f0d-40b2-49f9-99a0-996b384041de", "indicator--2e80d7ce-ea05-4601-89da-ac29c74fd840", "indicator--6702a327-a723-475a-b051-c8d4b44a5382", "indicator--af6b3d83-316d-4797-a6f9-478acb0b7731", "indicator--bf0b48ae-0105-4a90-9823-82e52373816b", "indicator--3d7b1bf3-3cc1-4cd4-9b97-b5936c454d11", "indicator--8dc077b4-51af-45e5-a83c-d23ec1f23f43", "indicator--922ebb11-4d7a-4ae2-8bb5-df98659d1d86", "indicator--b7b674de-ad90-4ee8-a815-fd47e260b85e", "indicator--be8fd97f-abc9-428e-a4eb-1ae0d9c5cd76", "indicator--fe5ee48e-55fe-4a06-ad1f-c101366f30d5", "indicator--5f66a840-15e6-40ad-8bb0-f8839fffb088", "indicator--a965b03b-373e-4bdd-aa62-f47fa41e602a", "indicator--c1586977-44b2-4697-96a0-070363d1b506", "indicator--3cbf5a9c-fe87-44f4-b1f8-6abd833dad5f", "indicator--cb14698f-098c-4ddd-bf4c-c448e9d1b448", "indicator--6ab39a33-f10f-40d8-9798-4cb895e4c82a", "indicator--fe21f0f3-bd43-4e56-802f-77ccf0e623f9", "indicator--247f2681-574b-4683-a55a-acd810d1db2d", "indicator--9a16bd84-af66-4bef-a47d-f336a36bebfe", "indicator--33620be2-d276-4896-8450-0f6a918bd6ad", "indicator--f6b192fd-2d74-4078-896e-9388ef60072f", "indicator--fb1a3edc-961f-4153-8133-bc2ca4d8d1da", "indicator--98043792-27b5-4956-9e79-ba550a0c5fef", "indicator--06974b35-a85f-4713-81e3-d927dd4fd355", "indicator--d5aee80b-0072-4d3e-979a-8e6dea2baf0c", "indicator--9c631122-1aa5-4f1a-8827-db92b453f0ae", "indicator--456efe55-5e57-41b3-bdf7-8cf9893a5073", "indicator--e704a1a4-73b1-4cf2-a734-c17bb63c0aa6", "indicator--59f7df3c-9168-4db0-ad09-1e71f72d8321", "indicator--d68b9759-9593-4c8a-9cf7-b63a53945d7a", "indicator--f79b0d44-f582-405d-9ed2-59987960aad1", "indicator--d1c596e0-6012-4b30-a7c4-81181fa607af", "indicator--b2153631-fca1-488a-8652-e539d6e07352", "indicator--11145372-b634-4d3c-87a4-e2deeab09e32", "indicator--17ac634e-ff5f-4373-961c-1b2a3ce85a33", "indicator--8e07a417-ca87-42fe-a985-f1edb9f71d49", "indicator--31999e59-ae0f-47f5-8109-5f116f5fb80b", "indicator--fc784555-1475-42f7-bcc3-57e4732df443", "indicator--1abfb345-5dd7-48d4-8028-5325956f80a1", "indicator--31fde254-eee7-407e-9a6f-f4ea76ac4925", "indicator--43bffab6-5838-44d2-b581-08900f8a43c7", "indicator--973e3e20-5f3e-4dfc-9611-d2e6e68fcc35", "indicator--477c4993-14b0-4c6a-8e66-27c5b1ba61a8", "indicator--7e39b5c0-7b66-4b9b-bc6a-b520c41a306c", "indicator--62be4a90-2f2a-45a4-827b-c9d085b80286", "indicator--f77a3eb9-ce12-4ca3-9d45-dd723ed225fb", "indicator--791c5cf2-1c41-4b42-b81f-ba6634ca4a3d", "indicator--5a429650-9d05-460f-afc6-087d1f91251b", "indicator--649bea24-e56d-4b91-9f51-0cdd4ddbbc73", "indicator--e8c5291b-46e1-4a88-bee9-3fb130b6560f", "indicator--244cf767-be20-4ee8-a70b-fe1412eb6f51", "indicator--f440359a-1397-4f15-be66-3762e0087c15", "indicator--936a4893-364c-45fc-b527-0f9802135bef", "indicator--1ed4b308-3a1d-4ead-b10b-52711afcc081", "indicator--cf9f517b-3b51-436b-8dbe-1e10f90e82c6", "indicator--88789746-b446-4704-9f58-fae02052c7a4", "indicator--545072ce-31a5-43ce-be80-ad7a62706deb", "indicator--6584eb45-3a20-4fa2-9de2-b54bfa1027dc", "indicator--c8cf9e59-e19c-474b-a914-9763a0fb5d57", "indicator--3761dd88-0382-43f6-a762-03ab67c1b1df", "indicator--8ab8c0fb-e23d-4b23-a835-8ce93a07366a", "indicator--ab34ce34-c1f0-4d2d-9412-8e19bbf38e49", "indicator--f9e854f1-55b7-4e98-9089-95f497ba7275", "indicator--6ce2773c-42ec-44aa-8cc1-65b0518d086a", "indicator--0a1e6cd5-bf17-4851-9647-239984cb0e8d", "indicator--c8bda738-e57f-4ba5-ac2c-33b4dbc2efde", "indicator--9dc622ac-54c2-44b2-afd4-d6873b807be8", "indicator--e7a764f4-dd70-41bc-9b30-251e5f2ada5d", "indicator--33d80158-f0b6-48d5-b23e-0502a3ad9d33", "indicator--e9ebca18-5c49-4660-9ba9-faf146efa2a7", "indicator--3be19554-0763-4048-bf1e-f6dc309af09a", "indicator--5c4c7803-d68f-4a2b-92aa-2daac98f151e", "indicator--6ee17aa1-17b0-45d2-ad4c-f27fbf9ebd66", "indicator--02ca9a25-366f-4e5a-bbc5-33582d6ed02e", "indicator--1b086999-eb38-4b19-b7f6-6527312ed88e", "indicator--f12afb9e-d224-4f83-af36-d7863a9150c1", "indicator--b6d17285-256b-4013-a331-85bbb59e02d6", "indicator--47b2da5e-c67e-422c-98ca-5e2ffb76b8fa", "indicator--b3e358d2-9272-4d83-9923-420785614339", "indicator--a7301dbd-dd15-43ee-9f3a-4621208e9d02", "indicator--7033bca3-de99-4c4b-a65a-ff682488be8e", "indicator--241feb9a-6c76-4e18-8874-8eb59802e95a", "indicator--ef6bfbd3-a34e-4545-a506-512bc252e57d", "indicator--f059fe97-7abd-4dd7-9143-557e52f7139c", "indicator--fcf00b30-ba7d-4fc8-9245-1fa2575ccbd2", "indicator--dc37c213-b1cd-43af-a610-af9e2f19bf82", "indicator--33cfa777-d640-47c1-93f6-120f1632904b", "indicator--415ad328-df99-4247-bf2e-86b78fcabe52", "indicator--25b0a390-eaee-421f-a948-dcce34491a9d", "indicator--f8f8b9f1-ef7f-4a8b-b2c7-6a872347ff74", "indicator--0c66f2a1-8bc2-4f9e-bb43-9d0a9c70543d", "indicator--eaae174f-8f0f-4334-a4f4-d5972c396165", "indicator--0866593f-71f2-4bff-8ac4-316c537840ff", "indicator--5502dae7-53d5-4f95-9f90-ec95e7bd8760", "indicator--7056776a-cc8a-4897-a92b-0f662a883a8e", "indicator--a12b6bf6-94c9-4938-af5a-2a68b3d0f87f", "indicator--baa5e474-3e87-489c-963e-d3139bb3ca8d", "indicator--04a30fa8-e908-4e01-af57-2eb90617e8bd", "indicator--e148671a-3b22-4035-a1f6-54a91dcaafd6", "indicator--2309089b-9f09-44c0-b0f2-6210923af208", "indicator--b013d1c8-a665-461f-a4c5-06f77df3bfd1", "indicator--18b2f4fd-8119-4cb0-9dfa-39c3a8200ba9", "indicator--f0a34a1a-edbc-4df3-a836-5e2d3ebdd98f", "indicator--d3fe0999-d3d9-4b54-ac73-f5f3b4584996", "indicator--a27fcb91-9f14-417b-bbba-866bd8e3e634", "indicator--03cb2f58-db94-4e65-8210-a96a040d0794", "indicator--4eca76b8-b629-4559-b26d-2a977fddd621", "indicator--9a1e44ae-3b76-4693-ab8b-7dff32f40c3e", "indicator--23c1daa8-6f41-4289-9ba4-7e6a40108818", "indicator--c183a1ba-2f8b-46d3-833b-74c2fe20c515", "indicator--aa95cdbf-e74a-4fbf-8ce3-048c3fc03851", "indicator--c914327f-7bde-4107-8634-4fa299a2942c", "indicator--13843c06-ee3e-459a-ae33-abc372350c6c", "indicator--3792ab62-8a6e-49a6-9688-ff15f373c3d9", "indicator--052cc05a-dbaa-4310-8ead-6d77986583e0", "indicator--80321bb6-8931-40ee-a1a6-e5447318549b", "indicator--6594bb9a-3acc-4938-96dc-ceffcae447e8", "indicator--dcc3d432-0220-480d-b999-240f36e63a32", "indicator--b7922ff3-81fa-4501-aaec-f1ebabe25ffd", "indicator--9e035b80-470c-46d2-83f1-7e2db0163a89", "indicator--4c3fc8d2-f5b7-4cd5-97ca-1c7e2371427b", "indicator--340fac83-89ce-49df-a9f6-bd4ee219f122", "indicator--68c6dcdf-3b63-4149-a987-6a84f857f042", "indicator--68333c88-7cc6-457e-9f55-40e20fb97c1e", "indicator--1fa9b252-576a-4870-8812-6e4cffd6ab77", "indicator--ac5a69df-80c1-4283-8276-33d77377540c", "indicator--6b114bff-a6e9-4899-a96e-204dae9d9ad0", "indicator--c09bb261-bbd7-4de6-8461-0e6057706eb3", "indicator--efbd7084-480e-4cc6-b8db-28057cff41d3", "indicator--07a926fe-4293-47c9-9baf-7739bc7a491f", "indicator--da11233c-f4c4-411f-8937-cfd44aa080c8", "indicator--af19dc28-8eb7-4d59-881d-29804435dfa5", "indicator--43783ddf-6317-47c3-80bb-d97e35f050c3", "indicator--de5e4aa8-5ba0-4348-925b-c7c9235cd6a4", "indicator--2551f84f-c659-431b-a0ca-98c7b92f8d09", "indicator--241fd794-9fd6-4e37-9632-b2e8550ccf74", "indicator--2e096ce9-81c0-45ec-aab6-3ec718603040", "indicator--333a4111-7195-455a-85b9-1d47c8a4bc29", "indicator--2bdf8d49-0731-44ba-a1cf-c6fd9b7c7a84", "indicator--02803172-9c1b-4309-a7b9-876e71e1061e", "indicator--8bea493f-374e-4468-9a51-cb72b5d3e7ea", "indicator--b4804cfe-4c8c-4abf-8c48-224d33911bda", "indicator--c004726b-ab0e-4768-8768-0443bf160437", "indicator--bfa7da93-e249-4f13-81e1-e00f26c300a6", "indicator--9c4829f7-d060-4ea7-94fe-c6cc189f18f6", "indicator--4b36e678-47cf-4678-aff5-ba55c55a3cdd", "indicator--48432703-1dfc-4e89-8e6f-6b94223ff4e9", "indicator--7eb143f1-7607-4a13-9920-bfa0b10411d6", "indicator--adeff0fb-b146-4673-b15a-8432dd7db6ed", "indicator--057bc9cc-8f6a-49cc-b0b8-1c2be69d1203", "indicator--1abd4fec-d12b-4d15-9f1e-82387c413ed3", "indicator--84573cf2-2ba4-4fca-a15f-871377823923", "indicator--4cc029ad-13de-4db5-82f7-3c43f3da138a", "indicator--a2aff36f-d55f-4d33-bff6-053e33a0d8a4", "indicator--d42f14b1-d2b4-45eb-95c2-0d42d08d4eb9", "indicator--6288c007-9722-4555-b3f2-9e13a546fbe6", "indicator--e1c8ed00-652c-4cb6-8afb-350f9ff36394", "indicator--bc5b86e3-9cf6-484e-a228-827d282940cc", "indicator--e960de9c-45a9-4f9b-854c-280ede11018d", "indicator--9eefa2c8-8707-41bc-afbe-4af86c99c061", "indicator--30fa4ae8-f522-43bc-8b81-8cc08f035f19", "indicator--4ea1a804-6b4e-4f00-860f-a7877e34101e", "indicator--8ce41e2b-14b2-4c2d-84cb-e21870aeadf1", "indicator--08ef0370-8c28-47c1-886f-18cfdf56b9bf", "indicator--b159e05b-3dfc-4c9f-80f4-3cb842845d83", "indicator--4dc7e9b3-7d43-4330-bf1b-bcadb39a4456", "indicator--a1fcd97f-4df9-4b60-b37a-aeaeb50932dd", "indicator--f8d697e6-40cd-46f8-a0db-af39b0ee4393", "indicator--7b8c2087-b421-4e41-8bb6-651e7bd06b1e", "indicator--eaeeaa2e-b943-40c6-8ef4-030a7ed006c0", "indicator--50726e95-bc3e-4b31-bd35-25d46a6f0f53", "indicator--7d2919fe-d92f-46d0-9938-3b7d56e5efb1", "indicator--ef096275-f71f-4978-8e7e-f236ce8c17f0", "indicator--f91a47c4-94aa-4468-b7bd-6bce5e48668b", "indicator--173d0192-3cc1-46ea-a12a-ed50c137ff32", "indicator--cd43e25a-3be3-487a-9495-5c746ab3bb67", "indicator--8bcf8510-aac4-424e-b121-2dbf8f001088", "indicator--5c4dd284-0790-45b5-a151-9018fdd96bf2", "indicator--00fb57b4-5e02-475a-a948-3affe7b39980", "indicator--b5516298-4a79-402a-acaa-85a2dd285537", "indicator--780aa005-a338-4ad1-9b00-22f92ede15c8", "indicator--4add9078-4ac9-486a-bd4a-c082bd13e5ac", "indicator--18d23309-f45e-478e-9546-4e0010b18559", "indicator--96e001d8-ff7b-4a08-982d-7c1b109c1fd6", "indicator--971d6331-c130-4ba5-98cd-f595d3c4f379", "indicator--30c4c414-e40d-417f-b0d1-98ed98569e2d", "indicator--8917db42-dfd0-4aac-86ac-87e984cb2c46", "indicator--fb8994aa-2672-44e3-8024-2678d0f3c795", "indicator--4700959c-07ac-4900-a6cc-f570efc54027", "indicator--3da88829-b400-4598-9e04-361abc5e6b53", "indicator--dbc44935-005e-4a61-b658-78e92e1fa98c", "indicator--a6e321a8-8e61-429d-9250-e9560776ffef", "indicator--72d671aa-5439-48f0-9112-1e4264cbed3d", "indicator--d001ae6b-04f7-47b3-9f2c-009f8bb76df6", "indicator--b8f74cc4-3ad5-47b5-801c-40480f43c139", "indicator--5c66bcf6-90fa-45d3-a151-aaaeb99a198b", "indicator--09963020-e5fc-4288-be00-b03e0a97f312", "indicator--7a004a07-ee57-4685-9d36-e69dfc0c92ea", "indicator--2d1ad381-5140-4c4e-aed0-93775891b615", "indicator--3ea78b13-46b0-4b8a-9941-eec6f0be3ce6", "indicator--df9c4723-4452-421a-8695-6dd2955218fa", "indicator--b56eabea-164e-4bd6-acb1-b2c46f3b0ee2", "indicator--4ac3828a-0eb9-4d1a-bce5-0e237f65984e", "indicator--ab641768-026e-4f17-8ea2-025a5b49c152", "indicator--7bbe2b0a-0d83-4fdd-9544-d9ef69b2e070", "indicator--9617f00f-4a10-452d-b2b6-2012f77ec699", "indicator--7493dfd9-4dce-42f1-9a73-7e177502b0e6", "indicator--59d627c6-d115-4238-813d-01e555f997bc", "indicator--2a3dfa05-7b50-4b3a-9154-e9d5e99dcd89", "indicator--aa77317f-4f1a-419c-aec7-a057f2c94b4c", "indicator--a984d4de-54c7-4689-a5c0-a92d9ab1036a", "indicator--7176cc79-4161-4067-b143-923ff9bcf0fb", "indicator--dc1b45e0-c713-4641-ac34-5a2bf284b0a5", "indicator--1d9d31c1-0653-443c-bd63-6e64912c44a2", "indicator--e78f934a-d797-4bbf-a964-9bcb9a7fb8df", "indicator--db5667d0-c0dd-4a6c-bf91-5d7a01e08086", "indicator--efd0f060-9fc4-4e07-8d51-b62ccecb61ab", "indicator--a4fbac0a-690c-42aa-b000-93abbbac9dc8", "indicator--9d95e64b-2553-47fb-bf92-a3be10a33d8b", "indicator--845d6a7f-e222-43d5-8809-d145c455d050", "indicator--9bd39ef5-1a5a-48f9-bb19-9cf2b6efe3f8", "indicator--8f10883c-f72f-422b-b4e4-54c81f9ce642", "indicator--ac29a5b1-9cb2-4710-b652-2f0c99da14eb", "indicator--4054ae7f-df11-401f-8fba-1d7d6818fb18", "indicator--d0e20ba8-e06f-4d77-8683-08552103f5e9", "indicator--44f04e14-42bc-400c-941f-2fb3e3dbf5c0", "indicator--48dba285-801b-4a98-9c33-877a6433bfb7", "indicator--c20b9966-b754-4947-a886-5030af31edc3", "indicator--60eb84e9-991d-4f38-902c-f3300dc41fad", "indicator--c817303e-f636-4a2f-b503-c7e08465f44b", "indicator--226654f2-cd12-408f-a56b-5d9801e851f1", "indicator--5446ed7a-c12d-4329-93e3-425db26ee0e2", "indicator--b6a69c66-21f8-4d6b-88ed-4ebcd16a37d7", "indicator--da999dd1-d13a-4fd7-8379-1ae0a7f17344", "indicator--4b108e16-3765-4cfd-b70f-0ebb4239d1fc", "indicator--bd41f741-acc0-4794-8d60-f8bc5a25d489", "indicator--af90b222-bb1f-4288-85da-7d3fbd302ae6", "indicator--09c02b1c-97b0-4756-852e-d5e4bfbe5733", "indicator--bba2c7d3-884d-491b-9904-85a7b46a77a4", "indicator--be1068ed-7034-4909-9dca-c322195147c9", "indicator--025dcecc-b390-4eaa-ac47-d60b81417fd6", "indicator--3cb15820-c0f7-431e-a193-a6648dbfc806", "indicator--26e140b1-0a8a-45fb-9931-2037cedd601c", "indicator--dcd17349-a59d-4ecc-8934-1224036d8417", "indicator--5df6c750-1ac9-48b2-a42b-878f906e09f5", "indicator--49198216-ece7-4204-a2e5-bf84c112ad69", "indicator--bb053c16-ac7b-4ed2-8c07-4418315a0785", "indicator--b828e34f-1460-4ef0-88a1-985ed046b558", "indicator--aa475e37-18a7-4c4f-bd57-3a24bee40873", "indicator--5bdbe827-5659-4388-aa36-b3ce6b416b03", "indicator--6f1f18ba-96c8-47cc-b0f3-33d5e95be869", "indicator--a0a9e198-71d8-41b6-a75e-abfc39b25ca1", "indicator--d6f5bd26-662a-484a-bf30-b451a1780615", "indicator--5d5a5a8b-4fdb-47a4-8b07-90430529fe1b", "indicator--18ed5fd2-7e2c-4e09-96a9-9faea19ca0ad", "indicator--750816a9-21b8-41a6-ab7a-85592e8cd53d", "indicator--0922ff82-87c4-4f4e-a4fb-ed17ff4f95ba", "indicator--25555d7c-2262-427b-bd39-2746f9dd3cde", "indicator--a0ce3ac3-ecce-4e39-82af-ae0afb52d5a9", "indicator--bc52ce34-702e-4dd9-8904-8144d40415f7", "indicator--f0def953-3d69-46be-953c-2252529d5304", "indicator--52e97741-d700-436a-a6df-f8d283d33e81", "indicator--ac2face8-ce9b-43fd-9b79-29ef744e3df2", "indicator--351e49b2-fd2f-48e6-b3d2-e8dd7e5c69f1", "indicator--03b3343f-e81b-4060-b97e-cfe3c5589940", "indicator--8b729b5e-d9e6-4539-9715-f30af8512103", "indicator--f59ec7c8-9307-49e9-8844-108a0e4baac7", "indicator--9149452c-c5f2-4261-9332-69bac0930341", "indicator--b3152314-e3ed-4b27-a529-6a9fb66274ae", "indicator--5222258f-cc31-4446-9fb8-bcbf2f2e7d93", "indicator--9d031891-0a0c-4687-ad58-c7bc300b030e", "indicator--f75dae30-2d1d-4328-83a4-953758218043", "indicator--01b1cf47-032b-4425-842d-10edf364ff1e", "indicator--0097f1c4-bace-4d18-af88-d64ebe175b0e", "indicator--9bf6a9d0-eafe-4a45-bcfb-1111a8c4ee38", "indicator--976ab418-3bb9-4c75-8871-19732b5d0755", "indicator--650544e8-7874-4c67-9164-f490fefd1cac", "indicator--853523c2-9834-414f-9f4f-f26ce570715b", "indicator--65d68e6d-0253-4c91-93c9-b92f4bb588bb", "indicator--4b184cad-349b-4776-9e25-e08e51ba51cc", "indicator--593199e5-dd33-44d6-8103-7c63fec17e09", "indicator--170721e7-feb8-4007-bd6d-976f67e78bcc", "indicator--192bd228-986c-44c1-bb36-24401a1738f5", "indicator--56c4ac91-4ac8-4ba4-a84b-028f31a0e523", "indicator--4e12fb7a-f235-40de-b9f4-78bcab4cf1af", "indicator--1d1d5d37-837a-4d3e-8f68-5db5276a89e6", "indicator--792862da-bba0-4ff3-a36c-3e39004ed518", "indicator--44a94cb9-9a23-494d-9233-c39a1b21ecd1", "indicator--111f4a3d-18e6-4567-bdfe-5511fc44a1ea", "indicator--66f09129-b283-42aa-94cd-942571a09811", "indicator--e8b332d8-9aa5-41fe-bd93-6259679ae970", "indicator--90741727-3cf0-4b23-b4b4-9f89f20ab7cc", "indicator--baf9e49c-c146-4d4d-a6a7-c9004631a999", "indicator--2ae55b7c-601d-464b-b967-7ec11065fb65", "indicator--96fbd21d-0480-478f-82b6-3b01d2b3c252", "indicator--a8ff96a4-fc89-4d4c-94f1-443003ce46f8", "indicator--483d440e-b82f-446b-acba-61868a2f674d", "indicator--4b9e8a1f-3390-49f2-ad14-321d92c62271", "indicator--531f3867-7e38-45d7-933f-cefb69bbdf21", "indicator--c37552ce-6f9d-426d-a12a-e4e13058f1a9", "indicator--60ee60ca-bf91-4fa6-be63-1db269f065e5", "indicator--2d5dfe3a-0590-4003-a45e-febc59057e67", "indicator--d869974a-41c4-4b5d-b3c4-bf66cab665aa", "indicator--559df7c9-c299-450c-8cf2-ae542d28ac78", "indicator--c8d3f798-0c8b-432d-b6f1-3ebee20c0fa6", "indicator--db47ce80-6526-4388-9668-591bb0ac63c2", "indicator--89efc32e-e1db-4c2a-bc81-c27092c83c76", "indicator--8ca18a71-c51d-454b-8d51-1f2a078e2f5d", "indicator--78565d91-948c-4b93-9b67-4d6e347be1a3", "indicator--ac02099e-c874-43a5-8f9f-c8f331a7a5f1", "indicator--2ab95064-1bff-4fd4-8e94-ecdc5e86ed42", "indicator--4e1c9c32-f478-4b7f-86ef-3a6ca10375e5", "indicator--5da2d705-f6c4-4cf7-835d-1d0022b6fd6e", "indicator--6785c89a-b67a-4cc7-bc4b-4821c2e5ec57", "indicator--ef1fde6e-8ebf-4f57-b020-c9643447b733", "indicator--70857290-4f1b-453c-9441-3146f983b40c", "indicator--98f2ad1e-49d9-4cc1-9b78-c274ba4a25a3", "indicator--d32c40c6-2510-4c21-9cbd-7bf8145c3f31", "indicator--7fb6ef52-598f-4bc7-9e00-9d805c602940", "indicator--b8a9d4d5-389d-4ecf-a0ba-77fd8bc06042", "indicator--cd1acaa1-ba65-4f6b-9b69-bcc662113903", "indicator--e9648ea3-e26c-458f-b783-c5610d039a2c", "indicator--8999ec52-de1e-4195-ae14-713ac7dea3cf", "indicator--02cc9999-9427-4e73-a5a3-7e92b60abfbf", "indicator--b48c9544-3864-44bd-b744-95c38d3febaa", "indicator--a83db6ad-4eec-43c7-aa87-1391656787f1", "indicator--a8f3a587-4bbe-4ea0-9198-d45232e2132c", "indicator--b049863e-c45b-400f-a68e-3341bfba7119", "indicator--9cf8b74f-31fe-419b-9c4f-a19d7e6312f4", "indicator--20196377-f331-4c3b-b972-0debd1d90a22", "indicator--0ffeae4d-15ad-4384-bd18-60db3749e1ee", "indicator--86c86373-abc4-428f-a35d-6d565d0f693e", "indicator--2891192e-78de-4df3-a2d2-27ed3414d38b", "indicator--594926c7-7d8c-4cd7-a005-e28c0d777266", "indicator--1a7e35e7-1351-40ef-8d4f-fcd8b9538496", "indicator--4b0a68a7-33f2-47d7-89d0-f018b24c5b0f", "indicator--4e3e0653-6be0-4698-bdef-81eaded154e8", "indicator--f3f11f73-81a3-448a-a781-d9778780490f", "indicator--468e898a-088e-4905-8c84-2a7a75eb0f4a", "indicator--09f783f1-f33f-4815-ae2b-f630b6b83d18", "indicator--13f5736f-ce82-438f-bfc2-d3310333c420", "indicator--e5bb2525-4f60-46f7-b246-027a94522021", "indicator--4b634e34-6b85-4501-9ede-17babd1f38f5", "indicator--55776b8c-af2d-4088-bc27-551ac919fc26", "indicator--a6c294b5-9bb5-4ac6-9977-f38f0f41fbb0", "indicator--3eafea0d-62ec-47bb-b7db-54620443d868", "indicator--55e3c244-eb14-48c6-8253-7c3dbfbf8053", "indicator--2ffa71f1-9993-4aa4-a1fa-b89e104cba66", "indicator--ba1f8a19-6409-4869-af58-ab457431107f", "indicator--73cbcdb1-b58a-4835-a737-58bcc3d9c09c", "indicator--c17e3002-83e6-4d00-8342-8e5e254325a6", "indicator--40fa1faa-52e3-4b6a-8233-3086d0e70bb7", "indicator--65a88a7b-bcd7-44b1-baaf-eb561f117e6d", "indicator--2cab7104-f8d1-4d8a-85d5-b1af369eaeee", "indicator--df64a027-ffb2-4c77-995c-8f255e181fda", "indicator--5f0b301e-2f22-4e4c-be06-1d0f4868519f", "indicator--d7a56008-d6ed-4f55-9200-dfa2ebdadad6", "indicator--ce5cf5d5-dc1e-4d92-830b-e8dca8270110", "indicator--ff008c28-274c-4852-834b-64820eda28c5", "indicator--70c7a129-c13d-4dbf-b0ec-d662f2daf534", "indicator--9364ebf5-7f51-40dc-a2c8-c718d44f2ea3", "indicator--1e7e48a4-705e-40f4-b749-853e13965063", "indicator--3d62323c-157f-43a0-80fa-412a0b085156", "indicator--fd52a5bc-231a-48ff-996c-079336cebb27", "indicator--d348bb43-3741-46d6-be33-d18dcd3c4a50", "indicator--f6ccf0b7-f08f-4d49-ab55-77db52fd8d57", "indicator--20b1c716-c199-49b2-9935-22c4992e5bf3", "indicator--adac9224-da9e-4964-aa06-e4d31c05bc37", "indicator--85c25a42-6c2f-4f32-9d7e-2b22dfdc40d4", "indicator--d9afe4b7-8bd0-4417-bdbf-b4896a4d2476", "indicator--6e58dbfe-e3ef-4d36-ac2f-02723da43eb4", "indicator--525781ac-9777-4c6d-941d-84b6cdd8fee8", "indicator--7a90e492-92db-415a-b130-694b947f2d41", "indicator--16eb2307-5cc8-45ec-9d40-6ad501a4bfdb", "indicator--7bfb8be8-361f-4b9b-8d70-8d4ba42df868", "indicator--d170640d-3668-423c-9beb-f5a64cc84c18", "indicator--8b754654-31cf-4f62-bb39-af29d8954b7a", "indicator--fa3f34ce-af78-4716-a169-90f4da9664e8", "indicator--d6bdbdcc-2dcf-4f85-8a7a-dddab210b84d", "indicator--7c42eed7-c29f-4fb3-889d-7ee5fdc1f5c0", "indicator--36eb9883-76b1-4e25-a36b-18c8b2360f7d", "indicator--aeafd9f2-bd5c-4591-9e30-7308738de3e8", "indicator--a344b9b3-d427-4fef-a3a1-0eb948800c92", "indicator--cc2c310d-fe67-4810-b142-e4eb1a0496fd", "indicator--3e68ec95-9daa-498e-9642-31b77ed9fe0c", "indicator--23693781-9688-4467-91b7-d732de002c16", "indicator--aea27a7a-e6b2-444f-acda-72a6a4c1fff6", "indicator--bdc5679f-7496-4ed9-9a8b-8b9526ea0912", "indicator--48b989d4-5521-4c55-adeb-13eebfbf0743", "indicator--fd7169eb-023a-4dbb-aae9-d04e3e533eee", "indicator--090ab466-c245-4166-8346-0cce7f46262a", "indicator--859f00c4-b3a6-4fce-93f3-d72f149f8af0", "indicator--69a0085e-4d1e-4125-87a4-6241040d697b", "indicator--b0773033-2056-49ea-82a4-638cf6e5ba90", "indicator--5d57b20e-01aa-47c8-b86b-277a8c646cd6", "indicator--f4546a5c-2a63-467b-9ad6-924157688181", "indicator--cecd17a6-fa03-4234-b792-0829b5e7e8e3", "indicator--c9673881-187c-4ca7-bd43-803d9b2c07e4", "indicator--4f89e77c-b882-4dab-9df7-9577c04d53bf", "indicator--a3f92a7b-8d51-4bce-954e-c10ed1cd6d4d", "indicator--9bb5e283-bb67-4eea-86a3-ecd6cb11d226", "indicator--255114a7-b8ca-4d09-894a-7bb88594f4ae", "indicator--5a25cf7a-aab3-4646-b133-1632df305610", "indicator--75a68b96-baed-4e1f-a475-07d2d2e87d22", "indicator--2a548e50-c34f-4e22-a12d-3f2dec3e438c", "indicator--3222d44e-e754-4233-960b-3e92bedc3f82", "indicator--973a5caa-2924-49fd-b9d2-d337ea9b50ab", "indicator--26e0474e-0e51-41fc-9e52-d6d9cb169dc5", "indicator--128970af-5890-427b-8839-d35222c7ed61", "indicator--1e484e67-a3a9-4e56-b1fc-807410b40c32", "indicator--852fd55a-2a1f-4f1a-8680-12a33268a285", "indicator--c346348f-a266-4f80-85cf-3893f35875c4", "indicator--47fc4ecb-4a1c-48a9-8e1f-4a1d113d43e1", "indicator--13df6513-bee1-4e0f-88c2-c0f77f31426b", "indicator--22c225d0-377d-4a29-a392-b8b92657de06", "indicator--57819469-733d-4dc6-854f-e78eb605e442", "indicator--1053fbb9-0c60-41b5-8624-cf13d4511475", "indicator--82bd4cf2-b92f-4bb1-917b-b0b7f6352d4e", "indicator--325dd918-d581-4f13-b09f-aa0c32cdb414", "indicator--830972d4-2fd2-449d-becd-14080ce4c0da", "indicator--190d06f4-d1b0-4e65-91fb-41df7fe72c27", "indicator--9170af72-b016-4ecf-87f7-d9df1afd9454", "indicator--1882e5fc-cbff-45d9-bff5-9744c2e9db06", "indicator--b1a427de-13ce-480b-ace2-91480a07aed9", "indicator--364c6f83-c3d6-4f03-8646-cd096868917e", "indicator--85550318-daef-4c17-b511-f09a6a1f61ea", "indicator--5d44222a-3404-4d1c-9afe-3aade19d3011", "indicator--5bf79ce9-421f-49ca-922c-9a45f9c99401", "indicator--f9817136-e025-4d1d-991b-749ee0af28da", "indicator--8581f204-5b16-4a11-b6f4-2245c3d59f31", "indicator--26543991-e405-4543-8c69-e1ca617e3013", "indicator--2cfbb171-8cb7-40ce-a2d2-00250598d4a3", "indicator--56f9b7f4-ebfe-4f4b-8eb2-d9c538a7d542", "indicator--38f0f573-6ba4-46fd-aceb-9d7cd93bd6ed", "indicator--591bc691-e015-42af-8441-5ed430629247", "indicator--df9a1ee1-9122-4ac1-906c-e25bd33142f0", "indicator--a5ee557b-314c-49ed-b802-0c0e5cdb1144", "indicator--a28c40b0-b285-4ed4-bde5-d58983e113e8", "indicator--c86966bc-464b-400f-8cdf-0d6bc89d004e", "indicator--05fa4c95-6676-43fc-a475-9ec22701704c", "indicator--a9cfaf3a-66e3-4dbe-ad17-49bf4d968734", "indicator--90340b9a-6905-4f41-b17b-e3f42cdd433e", "indicator--8edd34ef-984a-4f89-97bc-8c850a7d9ae7", "indicator--db0be65a-875e-4889-bee0-592983b862f9", "indicator--c5de364c-e7a3-4621-bde0-9dc45c97f285", "indicator--50719ca1-67af-4ddf-8de3-86b688e7332f", "indicator--6f29821a-8d5e-4f5c-85e2-8c58b3de3da8", "indicator--4011068e-4cdf-4fc3-8eb2-f965b0111ab6", "indicator--f7509192-6fc2-4f16-81f4-31eb446f9a51", "indicator--10e9076e-dd71-4475-b99f-447a269b1037", "indicator--79473fe0-e6ee-42c5-8baf-ad12afb40588", "indicator--be79a607-4dd1-4e1c-a212-ca43bbc1401c", "indicator--54e70574-3cec-424a-9206-6b1fa9df1108", "indicator--db439ae6-8f49-457a-a18a-cfe1e35a0f22", "indicator--2697597d-f6a9-4159-8d47-3205a84b83fd", "indicator--a8170b95-7daa-4c5c-9560-b29578b3a3ea", "indicator--178b63db-3f26-43d4-a0e4-bc80a39cfb9f", "indicator--62654e0f-b4ad-4a68-993d-a06452c063f7", "indicator--bbd3222f-464d-416a-9864-2427906eb65e", "indicator--5f9dbed9-6439-4b49-9ca9-0c74d5b8fedf", "indicator--031eea0f-5249-44b1-a6db-10211be235c2", "indicator--7aafcc3b-9c0b-429b-b4b9-a96f2ecbf503", "indicator--fbea28af-a75b-4aff-a35b-fdf063d4834f", "indicator--65831372-5c8b-4bb5-9b67-fe0762268ad9", "indicator--c5bf823e-ea96-4f94-8092-bba726b5180a", "indicator--7f414f5a-7ce1-480a-85d7-eb94ab2ad766", "indicator--1bfd571a-7c53-4a3e-92a2-4d2b164cbf13", "indicator--6ccebf11-db12-4f72-b4f8-7a408cdd6ccd", "indicator--2b0ccca8-c539-48b3-8b8b-5ddc70b3b33d", "indicator--0434bd3c-0811-4705-b361-a60eee69b16a", "indicator--e1d0f375-55a5-4da8-b625-6746dac96766", "indicator--1019ae78-b0fc-45af-972e-27698c7979af", "indicator--9d3cec00-c7b4-464f-bcfa-84baf20b6806", "indicator--7592e436-093b-42ba-a553-43d7a56ed7e5", "indicator--b1b24bcf-f8e3-41b2-96fa-3a5331975e2d", "indicator--29eb13f7-7531-41a1-a08a-f933e47cf8ac", "indicator--f1e12e4e-9330-42f1-b451-5d624a921efa", "indicator--c1fd173b-a1dc-485f-99fe-43c7207b6f68", "indicator--35ecb7ad-b148-40f0-b397-52529eb6130d", "indicator--ef984dc4-dcb9-45ee-9ce3-669e04ffaf70", "indicator--483d24ca-76b5-4ec0-ad63-e9b0b8aef68e", "indicator--cbbae4d6-8516-4521-b177-308f6c95f33c", "indicator--7eac1e39-4b3a-4071-85a1-ec93ca35b176", "indicator--e3055a72-503b-475a-bd26-27bd36661e73", "indicator--853e439f-b7b1-43ca-8c4c-0284906adceb", "indicator--d7e71138-04fe-46b3-8057-b1cd56bc5120", "indicator--a3a15175-d7ea-4e4f-ade2-93c7034cf296", "indicator--6a632927-c26d-439c-ab89-6c4f945e8239", "indicator--549d0b23-f736-49f9-bedc-92670951349b", "indicator--b2411aff-3b54-473e-ad66-13493547efef", "indicator--d16b70ef-6c46-424a-89f7-7680ecc1aa91", "indicator--f77d31b5-29d3-40df-be79-00c7e530f5c9", "indicator--58d71549-f584-4858-adb6-af4ef12f96e5", "indicator--72ef75eb-7f33-409f-858c-0b728efa3b42", "indicator--0069cf61-bb0f-4c4b-acbe-961a5fedb5a3", "indicator--4c501b51-8bbe-42c9-bdba-2097764b529d", "indicator--b9e54113-9b15-4e93-a6e6-92736cdf37b3", "indicator--53a103c0-cbd4-4646-bd2b-eac194a44a8d", "indicator--7d876e16-5dd6-4be6-9985-0f53fb62db96", "indicator--40000f61-474f-4146-bf21-e19b1af9911a", "indicator--9c57df15-22d6-4db9-9c6d-163ea2de47e8", "indicator--c59c0886-960b-4c4e-8298-51158dbaa507", "indicator--6bd8c1a8-713e-4565-9909-ddb2522b4179", "indicator--27661588-a714-46ec-91b9-10faa9feb6fa", "indicator--c6314c7a-7dcc-4baa-910b-306a7f37721f", "indicator--fcdba375-d117-4b7a-bc56-29386afdef96", "indicator--699f50ef-2f4a-4bce-8972-178d18be1aea", "indicator--54577c09-8c1b-4f00-a025-4b44c0291d24", "indicator--97e56857-6551-4a8d-918d-e61a6a5d2cff", "indicator--27793218-711d-46d6-a469-6c5f4c954d71", "indicator--355e9e12-4ed1-41ef-af38-b4c197539f91", "indicator--8f6b4707-fb0c-4535-a7e5-7ddd6eb5d8ec", "indicator--de73846c-a63c-4e55-a3b5-c51bad5f07af", "indicator--474a8e46-1a09-42bd-a80d-5f195806f54d", "indicator--d9708222-cbb9-4226-be81-94868cecd52f", "indicator--87a7b117-00f7-4a76-8d4c-863579dec9c5", "indicator--5a71f652-2321-426e-895b-62844c46fd1f", "indicator--a5e322a3-6e5c-400f-a105-a1ba7f429f8e", "indicator--13f499c1-2c0c-405f-9a40-5807ebb0c9e6", "indicator--d43ddc30-6dbe-4c0b-932a-a8429a35087b", "indicator--202184a0-6621-4261-bb78-f70453424e95", "indicator--4065a326-d318-4201-b2db-04bcb2cdf812", "indicator--08387ca3-4bdd-4eef-a381-907d8b3d477e", "indicator--572d9ed1-5aa6-4886-b26f-6ad6f0918249", "indicator--2e56f566-dd99-4e85-b2e0-08830f72b619", "indicator--a6f0c285-b98e-4ba5-b906-8c2e1e054fb0", "indicator--84e51940-f3f8-4f80-9e50-f72cb95ad3e4", "indicator--3f50672f-eb0f-40d9-b2f1-dab4d696bc72", "indicator--bbc2ce7e-5360-490d-a77f-340640a5ee2f", "indicator--5710d52e-12db-492e-be2a-549a172f2087", "indicator--2331cba6-fdea-436e-a240-2283c4a6b2c8", "indicator--afde6ad2-7d11-40c0-b624-dcfd738303ba", "indicator--eb85cdb2-907d-4395-8427-14680893a7f1", "indicator--185c9d0c-ada2-4c7f-bfc7-d12dbdcedf34", "indicator--697de8cc-3097-4e2b-891d-576a3fd952c9", "indicator--2d0c3b76-7214-44f5-a300-5db073711994", "indicator--28f1e1f2-781f-44e8-87d5-4d06cbc4f70e", "indicator--2ac6cbd8-c853-447f-9842-6300c62e5bb5", "indicator--dd8e2404-aa37-4c83-b9b2-21c46cb94055", "indicator--720942d5-aa31-4df9-9b21-92cae991992d", "indicator--e1f79915-da2c-47c9-8849-ec736f8ec0b0", "indicator--618a6937-da20-4f09-b448-a574f0f32642", "indicator--d049e15a-6696-4eb6-90f6-c1aa7997a826", "indicator--eea63322-3a67-4113-8534-aa2360f24d7b", "indicator--7aae7615-90e1-46b6-a39b-77a9409bacd7", "indicator--e1510162-ad39-4439-9cdf-02bb6b3ba812", "indicator--24f410de-e684-4baa-803e-c42359459290", "indicator--13fd3821-1dbf-428b-932a-cbc22acd8b35", "indicator--8710364d-b62a-4a19-b54c-44e8d6009bae", "indicator--115cf4ca-db30-4aa8-b1e6-0201f0e0b7d2", "indicator--6ac6c540-428c-482b-a102-590df39a6295", "indicator--c52eec69-b743-4c37-bce6-a29cd88aac17", "indicator--a0aa296a-0b10-4f1b-8560-7279199ed4cd", "indicator--0ee6de26-4188-41a8-a98e-40f0f626ae2f", "indicator--764653f3-e81b-4982-9b04-cb32ed56d198", "indicator--acd42c96-0ff3-4814-9fcc-239150701cd1", "indicator--76475bc1-412b-4bed-a882-b2299792345a", "indicator--9b3ff2b7-9fd0-4a5b-aea4-4f3cda27df68", "indicator--f5e2fe29-241c-4052-b070-acc48a0a281d", "indicator--da068bf7-6c70-496b-82c3-08f8fac713f9", "indicator--8187fe62-c05d-4e68-bfe4-1866afe03c88", "indicator--c90cfaa0-8b74-43da-952d-787f4efcc577", "indicator--1c684d1a-8890-496c-9e21-1755d3b55670", "indicator--aa8a4549-092e-4e84-a370-449d357655e6", "indicator--52144d9c-41d3-4e10-a576-a70e13183ec6", "indicator--587b91be-ab98-4f11-a72f-481db7c28a70", "indicator--92eb9ffb-5432-40a1-a3d4-f2c8e1a60738", "indicator--8d617e49-444b-4b86-9beb-023f1b17ef33", "indicator--b2ad6acf-b9dd-4e86-b6f0-19b74abd92fc", "indicator--e0944acb-61db-4df9-bc7f-3f33c63625d3", "indicator--76a68091-319b-47a9-afb0-2fb277065e70", "indicator--d548b011-f79d-4b75-b94d-bedee52e5a9c", "indicator--70bf285f-336c-4687-bede-a21dd07d2258", "indicator--5927a01a-3b96-4fbc-858d-f9ea330a6df8", "indicator--fa01112e-4fa9-492a-8e3b-918c44d7dd3c", "indicator--5957ece1-1e66-4597-bf57-e8eaf3867b0b", "indicator--5e331286-63a7-4d7a-94f5-5c255c4f4a65", "indicator--e4a77133-b0bb-4658-b291-a90f9e2a5dfa", "indicator--50818836-02b5-4b1b-969a-39488c1058bf", "indicator--a96bbeeb-405a-47d0-9f14-e772d1b04374", "indicator--a3352132-d153-48d8-96d3-a74e083952e8", "indicator--6b067b25-407d-4fa2-9562-668d7e017832", "indicator--02fcaead-8c88-444c-96e3-dee2ad6bdc72", "indicator--f5a6cacd-f20a-4e04-957e-56ffce20c926", "indicator--2bd8f2e6-d5c4-4abc-92ca-a08bcee91689", "indicator--356f67b5-75e3-4347-849c-e083f8d46d82", "indicator--de29527a-74e3-488b-9fe7-9fff211cd838", "indicator--3cf84c83-d39b-4c4e-afc1-f654753f0643", "indicator--0eeb7b91-4c25-478f-91bc-9c1bb23d7123", "indicator--eed092fd-1b43-4475-98ca-c6e0361d484f", "indicator--225fca20-e0ee-4bf3-8432-04a5e7920327", "indicator--5ee42e5f-a742-467a-89b9-c57756ca23b8", "indicator--23531ffa-603f-4b96-be1e-fd0bf508e0f1", "indicator--524a1b5d-b6b9-4d00-9b1e-de228bb2915c", "indicator--026989e1-d06b-4290-9f7b-3e6495694985", "indicator--e43a7b91-66ab-47ea-8212-a571e8d2fcf9", "indicator--94967ef6-f53c-4f9c-928f-c13a95e8ab71", "indicator--c208ac41-fd19-42db-af39-1a0a529f08d2", "indicator--fba6ba83-df65-4557-8132-5e5dbf9ba21b", "indicator--ac2fd9bf-cc29-452a-bf92-c0d1a8e9336c", "indicator--7e6063b2-02f6-478d-a5e2-ff7df4c4598f", "indicator--41b772e9-a76c-4b7b-9571-ccfe6c74a8ad", "indicator--a19cd590-6585-463a-b5f6-49ba15d33aad", "indicator--9232009f-95a4-4955-8346-4c89d8775c10", "indicator--c54e59e2-d884-4f62-98cb-a41a358f3d8d", "indicator--4cfbf561-8ea3-46bf-a122-bd29930860a0", "indicator--7450ef2e-10f3-474e-9c21-6f1d78b441ec", "indicator--5b7ec467-3f60-4212-a6c8-c4da4491f475", "indicator--9451502a-ba98-4e69-bdc3-91cf8abeb86c", "indicator--bb7b3026-819e-4d4e-a8f0-710e1c9eb38b", "indicator--096b35a0-37bb-478a-928d-7e2d57eb569b", "indicator--460c77ef-b574-454f-9433-9c9085300022", "indicator--d77e3799-ce35-41bc-89a8-030024a9cd30", "indicator--314aa3e6-2b3d-4ca5-b6bd-c434129e5a9c", "indicator--125446d3-e77b-4ffc-ba24-f2e3cae03ffd", "indicator--40330d77-c765-4114-9b88-d8b3b39f0e50", "indicator--605c6d26-8221-4774-a059-c9883e7022b2", "indicator--ee36e30b-5d87-474d-88fd-420f69911e95", "indicator--7938d9da-8810-4b85-aab8-dc3221f0945e", "indicator--3b4d4a77-f6ce-4b1b-88f5-fe9b9886480d", "indicator--b68ebf1c-eb61-46c0-9377-5480e029ced0", "indicator--39d077b4-fdf5-42e3-9336-cec500b662e3", "indicator--35c1c26b-598e-4781-8e75-fe3db7f7f6b4", "indicator--a1c363c6-8242-4996-891c-7e26a0bed0af", "indicator--9ebb503f-6df9-41fe-936b-5d7e91287c91", "indicator--ec4da20a-98c5-4eb7-a41e-7e66d7feea43", "indicator--b810490c-5ba7-4206-a0d1-445059095966", "indicator--7c822930-3fce-4927-9669-af31a2b78774", "indicator--ac7dba2d-90e8-4eac-b49c-a6daf242a2c5", "indicator--287b66a0-779b-4930-9166-ccf9477b6243", "indicator--b003972c-c2fa-4f0d-9501-98999e2b56be", "indicator--4cfc50b8-1ca8-4cca-ab12-2d04dd04ce18", "indicator--fa37444c-2ef3-4e23-9f0e-518b494635a6", "indicator--1e736bd2-4201-4d2b-ad92-ab37b451e26b", "indicator--8d30f11c-221a-429c-a836-8d5dc729f81a", "indicator--ea25b485-696c-4be7-a42c-fc32ae556660", "indicator--cfa8e51c-9288-4cb4-a92e-e9e4791eb05b", "indicator--4af59a5d-36ae-4d96-acd3-7f67ae2d506d", "indicator--5af703bf-c383-41e0-8459-4c53a56514c1", "indicator--06e48274-b4d2-40d2-8644-0de0d533d669", "indicator--da1ba0ae-4f7d-4db9-9ff9-cc008d21b586", "indicator--9ae5c706-63aa-47c8-bc85-8964ce39c031", "indicator--c54f21d0-a9cf-40b5-ba3a-1642031a01dc", "indicator--db0cea13-9ef4-4094-8c80-7d45e8ad34cf", "indicator--202362fe-30be-4c29-990b-df4140a0bd0a", "indicator--d6d43e5c-a305-4a2f-8eae-991de7f20a2d", "indicator--bd98875a-04ec-4c03-ade2-bdc003ee72aa", "indicator--d9dc3e34-dd66-4577-8779-292498af411b", "indicator--2187e418-fb1b-40fc-b7ad-4264cf18e990", "indicator--2d2288a4-dd45-4bac-a095-1e09a890991c", "indicator--f9103556-a64c-454c-984d-327a23494a13", "indicator--70704579-5334-4c60-8cb1-5ebf5d585e58", "indicator--46633968-96e9-4228-beb2-73768d7b4b30", "indicator--36ea9527-1b87-46ba-ab25-e807d4ce38af", "indicator--c84eab5c-501f-4bfc-a217-6378c81f5426", "indicator--1c7b9a6b-5350-483f-996e-31d0fa6489e0", "indicator--ebea273c-624b-43ee-86ba-8daf92414753", "indicator--7a771d16-0e5f-436c-b61a-41a0434dfb0d", "indicator--f5cbbe63-ff33-47a7-96ae-24ed4e8aeded", "indicator--bd2fceec-398c-4a3e-b521-e691b4f807ea", "indicator--94a3a121-cf10-4634-a733-85b26d5326d5", "indicator--dcc11058-845f-40ab-8892-f2d599c5e17e", "indicator--e77e0198-017b-44d3-925c-5d9a8429c2a9", "indicator--aafdb95e-39d3-4cfe-aa6a-8e25f590dff8", "indicator--cbf96502-ec85-464f-b654-106dcdbc1a19", "indicator--d5fca744-f269-462e-9017-4dad6c8e67d9", "indicator--7b0fceed-3f3b-465f-ad32-c034b6943bee", "indicator--cf4644a9-d3a8-4905-b3e0-3a0502c82427", "indicator--338af1cd-59ba-485b-bd42-b38999452101", "indicator--f6b83822-340e-473b-bf17-e3bb3567731e", "indicator--8aa085f6-0b51-4cfa-89a8-25bebf2752f9", "indicator--7525156e-4310-4d4e-a91a-b30d80772354", "indicator--d1eae9c6-0483-4d21-b176-7f62beaddff1", "indicator--57823ec3-2d06-467b-835f-982e7762d529", "indicator--3cfd823e-4a88-4d72-b196-d9225c8580a6", "indicator--2e68a606-25cd-4eda-b754-2fc6fc5de9a9", "indicator--0588aba9-827a-49d6-b595-fbae1f6f428e", "indicator--e0311e18-4443-4548-ae09-d87245391e0a", "indicator--bd58ec6a-e2f2-4ba9-a784-ea283c16f5d5", "indicator--538caf70-83f2-403c-a4a9-fba0e1d947d1", "indicator--8fcef003-34ac-4698-9fbd-13cd0b2f118d", "indicator--20ba7a50-7bee-4f08-8052-049278c7cf04", "indicator--e139546d-3b4a-4d8f-a4eb-f32800995a5a", "indicator--3240b074-c411-4918-b66b-00a66278bf37", "indicator--967ea104-2a52-42dc-82eb-bbc91ccf1b0d", "indicator--aba3f23c-669c-4b54-a798-2df8755fc936", "indicator--38038f54-b17e-442b-9146-66a6efb78e6a", "indicator--34b6a790-0a8a-4273-ba33-f6c82a481325", "indicator--23a2a483-b4b1-4474-97ad-897c53a52439", "indicator--751cf389-0c13-4c99-b1dd-66ab120ab04e", "indicator--dbe343ae-985e-43a7-b496-3208b25a71c0", "indicator--03fa92c8-ff79-4410-b497-c0b19c39613b", "indicator--dc26865f-f102-4bcd-8f9a-51e9f20777e9", "indicator--8b73820c-69b7-4b13-96c4-fd4cd3c8b1f0", "indicator--a85f08c6-92ed-4036-b96a-4bc7764680d3", "indicator--7cb46550-d77e-4175-8a92-b41718df19fe", "indicator--57fe9898-eb7d-4313-8d94-42343ac06f39", "indicator--5b9b2611-0d96-4281-86ef-b0d6267f44fa", "indicator--c42c2165-64c7-4037-a0ac-c6ca5a18a187", "indicator--fd6e0cf4-4595-4d4c-99c9-e33b3bfd7e17", "indicator--830e116d-9c8c-465e-814f-d8895973fff1", "indicator--61062fc4-b45e-4c6d-97b9-7a56c564dd47", "indicator--dc5b7aee-d2e5-4d18-8a1c-6107f6407f60", "indicator--2069d505-2b03-40a1-bd65-40968c710c0a", "indicator--59c31874-320f-427d-9037-a6fa55732919", "indicator--79017702-c89b-472f-a0ca-121b4cd31d93", "indicator--867d2812-094e-4c7b-a0d6-136a5a81bc4a", "indicator--6fdbf14c-efc0-468f-9a98-c12e03fa7adc", "indicator--88d77c04-c1c7-410a-a3f3-71c310c6aad2", "indicator--217972e4-dfcd-46ce-9bd9-d12d0266cd01", "indicator--f7a43bc4-ceb0-450a-96e3-730eab2f49b4", "indicator--eb6ea5ee-01e6-43f4-9ca2-b6a3e836dc2f", "indicator--b865652e-c83c-4fd5-b93c-6b29d1552c20", "indicator--64eb77c6-b0f8-4813-b8eb-3a2138208743", "indicator--8996f75b-8e35-4a94-9d5d-ba378a679227", "indicator--1af64684-a4fb-45fe-b455-8596d1cdab9b", "indicator--1bdcd670-d84e-4f22-b442-f06d6ad06f35", "indicator--c6301dd4-3b32-454d-813e-54b964f3f0f7", "indicator--4f02d8fa-49b5-4df2-ba7c-532e79f9ff5e", "indicator--c14b359f-cae9-4a3a-8655-73d188b38a51", "indicator--39eb194f-7491-4144-8eab-d5f7d1d7474c", "indicator--1abbb5bd-e16d-4087-80a2-efea97d9ca75", "indicator--db3552fe-7e24-4f00-acd7-5e5ea6158890", "indicator--51bf56ac-b6b1-4f89-8ce3-aaec6f06c3e4", "indicator--f2c1fa48-5a31-470d-b3e4-7299312fbfbe", "indicator--c9a2fbcd-ef1a-4529-bc72-692e92fb3f75", "indicator--a2a71634-b00b-4cfc-ab1f-bef584fd1cf8", "indicator--4c3469ac-eb33-46ff-91ab-dfd9f5bb4769", "indicator--19c28c03-403c-445d-b5bf-36430635471e", "indicator--4f6645a3-934c-412a-b9cf-452c3c04c6ff", "indicator--c481fcec-08c0-4d9d-adc1-c0517e2c06c3", "indicator--98e196df-bf88-4b49-9b06-02ce4a444eb5", "indicator--73849a04-538b-45f9-a3e3-a3cb6543eb8a", "indicator--600162e4-aa5c-4654-897f-729b23c5e0b4", "indicator--53b03496-317e-467d-a920-d02f178d88cf", "indicator--02082192-8f6c-4852-8001-e149f9422a25", "indicator--cb5f516a-9ef5-4693-9d78-015edf6da676", "indicator--bcf99226-232b-4a2b-ab1f-3f68cd9f31ca", "indicator--79e8361a-086a-451c-a5ca-957df60f284e", "indicator--2c93ee32-cd16-4342-a07f-70146d41dd12", "indicator--16f7f8b1-e941-4b12-b678-255a4126afa2", "indicator--049c6109-1216-458e-8576-b2a82d00bee4", "indicator--3522062d-9e60-4ed2-80ff-af5dc1c7fdf2", "indicator--f1715a18-2c9d-4051-a056-5df8e9396115", "indicator--8d8ac69d-8308-461b-8853-52176469efa9", "indicator--675d2246-0d5c-45e4-b1df-98139b61653b", "indicator--fbdc6270-99e7-42d9-9262-cc2984605168", "indicator--1b30abeb-c06a-4680-8276-2cd9a08c368f", "indicator--65b1049c-a44d-4fcb-8b2a-f16716e9d7dd", "indicator--a53d9340-8fc4-4ce0-beb2-62c7321c281d", "indicator--f6e57fcd-665f-44ba-9ad1-05e3e3d75df5", "indicator--7164fc09-2439-49b5-912e-3e1077a227b9", "indicator--2c30cb0a-78ab-4aeb-a2ac-1ea8e5877d46", "indicator--3ccee202-aa34-4ba0-b553-0d4b70a867dd", "indicator--3c25036c-4e1c-474a-8e68-f617f02df1a2", "indicator--671b989c-f952-4ccd-886e-67ee2e38aa08", "indicator--af79db72-f0fc-43fc-a11a-a33806dc677a", "indicator--4ad6cd3e-ae4c-4895-99cf-a8774186e9e4", "indicator--f4d795a7-7a54-47fd-8ecf-c318befdc157", "indicator--986462de-0c7d-4ffc-9356-a4f005c36221", "indicator--3d9ecc85-2318-46be-830d-b39c623aaa00", "indicator--cfda0c99-1afe-45d0-8dbd-b425ed6f3660", "indicator--ce097b9c-2873-4998-8b7b-a491732ed893", "indicator--0dfa949e-80f6-4d5b-8ee7-f9e17882b267", "indicator--ef4ac622-3533-443a-8ee2-0201f462c2cc", "indicator--d154df53-7410-4f9a-8df2-5238a5b3e866", "indicator--ccd37fa1-ada0-41a7-816b-22f32070d174", "indicator--612a6381-f142-4606-ae1c-b7b304856ca4", "indicator--608d8975-6e21-4de8-a8d4-a2dfc51f3bbb", "indicator--55b49d48-11a9-49b4-9bce-f00cb291cfc4", "indicator--5aeeffac-ec33-41ce-92fc-5508bad58e59", "indicator--9ae18edd-428f-43b0-9e33-cd021c25d4fa", "indicator--2e5526f6-cdf2-4b21-9d72-42aa757c5763", "indicator--58c49ea5-6b5c-475a-9423-21f2990d8626", "indicator--e375cabb-5418-46b6-9622-866f052b298f", "indicator--86edab55-6b00-4837-b6a5-7b9f7faf7ee9", "indicator--ecd1520c-6bbf-419a-b1cd-255ccb0d4f00", "indicator--1a239fc5-9bab-4cd5-870a-455588175835", "indicator--0d1c3771-7c5b-469a-87b4-bb46c5a0bb34", "indicator--59a9c70f-1ab7-4285-8820-906527053ba9", "indicator--6974ec3d-a09e-4bda-ba7e-e9f446e9706e", "indicator--c31301e6-cc4d-45f9-a071-18432ece4787", "indicator--e70ebdec-0b19-4bee-a762-7f7331e303b2", "indicator--681a45ed-8ff2-45ac-aa95-6dfc1168f868", "indicator--e48ab777-2956-406b-971b-f9d0e172c148", "indicator--0430c4aa-7237-4d7a-9e45-fa1e27a692ff", "indicator--ae4de969-cbe9-4f64-afc4-222a9c48d9cf", "indicator--7987da81-2d28-4285-b934-d30e52aa1ab6", "indicator--b5b5d8fa-93fa-4c69-87ca-16c7c1ce1ba3", "indicator--746b9e37-eba5-48f2-8c1b-7444ac3b4d6e", "indicator--6bba632e-084e-4832-aa10-494dd3d90a4a", "indicator--1703e3df-8186-4be3-9031-eee78148f35e", "indicator--46b4bbda-f8f2-45d1-b115-97c8a05371e6", "indicator--6890e6fb-2494-4b60-9189-546011ed1e10", "indicator--71e707ee-82d2-4a24-bb1b-1e359940cc09", "indicator--aab9f56d-56a3-41e5-b1e5-c9b11ce0de6e", "indicator--d9fb519c-5c45-4c91-ab0b-909a6949099a", "indicator--274ea4fd-ee16-4376-8ec4-17d6b4a0528c", "indicator--aca6dd9d-5c23-4741-ac8f-b2142b07c729", "indicator--bf0637cc-cde7-406c-be18-f88557bfa0fb", "indicator--4284a03e-126b-49c7-b3d1-5a0cbac90221", "indicator--b6c5e8db-cf21-4ac6-8799-72e44e59a00d", "indicator--4360d64d-bac9-47b2-ba52-cb7ee1340e21", "indicator--2e6c1fae-03b6-47c4-b2d0-06c087a4284b", "indicator--346a9894-d722-4c76-a88b-bbc250de8643", "indicator--95c65bc1-26a8-4c6d-bbc0-11bb43c39536", "indicator--d5f152f3-1d08-4a4e-9f2f-4c2558ca98f9", "indicator--ed5a1b7b-9fa0-4192-9fde-0b2d5492e43c", "indicator--2001af1d-0e2b-40b6-b669-503729d96178", "indicator--8d0cdff8-932f-440b-9753-1ee462dc8fca", "indicator--399ba1a2-7b94-48c5-809c-222b98edfc7c", "indicator--cd3221e5-cd2d-4722-ba11-9060d945ba17", "indicator--12040481-fc99-4f7d-861e-8b3e8b9b013b", "indicator--ffc4203b-f058-4289-9684-791ea698ee9b", "indicator--9473c1b7-2246-4b01-a776-4558a5b0410e", "indicator--c45083a1-4d2d-4ea3-92e2-949570fea1c5", "indicator--d2774d37-7cce-4d31-a0f4-000c3fee48ad", "indicator--2f294077-aea0-462a-85c0-0a3cc31571f4", "indicator--e3f0602d-8d80-4911-bed2-c60da9a85358", "indicator--081ecdc6-294f-4f72-b367-73336353d316", "indicator--62311767-5667-44ff-9ac4-80898a3627c6", "indicator--c2bccaa4-4858-4bd0-adbc-13a3fa6178ea", "indicator--6147b5b8-678a-42d0-87a4-0cc702f0495a", "indicator--13e4451b-80c0-4d6c-b572-333dfa1be2d9", "indicator--d550d47b-8688-473a-b42e-e82bdca8ac28", "indicator--2d8e1d3a-df6e-4b49-a88b-fcbb62492d21", "indicator--fe08e1ed-f1c9-45eb-9f92-408cffc828a8", "indicator--6bec77fe-5b20-4869-9bc3-215f86567813", "indicator--314fdca2-295d-4a1c-a56e-e960247491df", "indicator--9edbd90b-38b3-4422-b17e-4677b66467ea", "indicator--70394471-8074-4ea3-85fe-8b1397028bb3", "indicator--b5013b11-3d4f-4c19-96a3-d9c91d487f11", "indicator--6264d4b4-cec2-4567-bf16-ee36532a5450", "indicator--053c7689-4062-4323-9486-d9a3e579b7d7", "indicator--6686bcdf-ee5d-4985-b084-16c6884255c6", "indicator--8be4a2cf-62a9-4430-8947-1cf6559d6391", "indicator--b2b42104-31d4-4e79-a4a2-92191e37e0e8", "indicator--6f5b66ce-9567-4434-8a9b-e94d6b1a902a", "indicator--3c62eb39-4765-416f-b566-0c54e42db5f8", "indicator--50ab8b9b-531c-45ae-938b-cc7d1201d0f4", "indicator--ca2fa4d6-6505-488e-b831-156b280bf264", "indicator--3cf2b5a6-12f9-424b-8d5e-a600c7f77144", "indicator--68827e66-a0d3-479d-af0e-00206f0ef45f", "indicator--1ba45076-5ab3-4c40-87a7-f8fdfcca5bf9", "indicator--ddffef94-e65b-458e-9955-5f6a1c2a48f2", "indicator--5f865bb3-62ed-4610-8cb6-29cb51441836", "indicator--62aec344-565f-4c3f-b9ac-0f45c94530ac", "indicator--c88e358b-e343-43e2-a9fd-dc614cc7f1e6", "indicator--8298fd80-9a31-44ed-b06f-0264741c268a", "indicator--5fd59865-2db9-4780-9cde-efee6737c0b9", "indicator--6eaca994-a1d7-4fec-b400-daaa61473807", "indicator--c79c667a-e928-4efa-9cdb-8597d27c41f5", "indicator--80f659ea-2f7e-4604-bddd-4caaa65c9413", "indicator--a33438cc-56f5-4ca8-8f35-cabc72b57d15", "indicator--31abb92e-8ef9-4ea8-882e-8737837281d3", "indicator--500499bf-0c48-484c-8fbf-c5a16e608796", "indicator--7763537f-8664-4612-9d13-21f7c3a257bd", "indicator--a6489d2c-2c95-485d-85de-5ce2b9fe15f2", "indicator--570fa892-f9cc-4b30-acbe-f7d8cf22ac53", "indicator--af584393-e588-4e47-831a-776674e37565", "indicator--fa8ceba0-cb54-41c1-88d2-76e0bb0aab15", "indicator--25523ddc-9020-4ae6-9248-e8e1f57b04ec", "indicator--dd02e83e-c90f-4d38-b15e-7452515a08da", "indicator--644e045b-e732-4cc7-9ab6-9188f14d1fcf", "indicator--5828e966-9f8d-43d7-8071-3a83026865d6", "indicator--a65d5708-8edc-4e90-a41e-799bac259e43", "indicator--9ee1d3d7-43cd-484a-9556-361fc006098c", "indicator--9c51759c-d025-4aa9-876e-5e4f15a30e39", "indicator--96533911-3465-4e0c-807f-4aed7df46744", "indicator--3979f4f4-f8ad-49fa-b74c-95a43bc44571", "indicator--68329d11-edc2-4634-b471-4f69e5735430", "indicator--93af89ad-1546-4da2-8087-87ead5156878", "indicator--95c22a71-152e-462b-86ee-5b8399adca4f", "indicator--de289c47-eb1a-4dee-82c8-f4a2fd0568e5", "indicator--1304f9c6-ac25-4bd1-9182-6170dbb0f475", "indicator--bbd019c5-6e54-4ce1-915e-e5ce5a655c2d", "indicator--a575f7dc-91bb-47d5-901d-9305a250d8f3", "indicator--70085e37-6202-4756-a8af-b79ada99b434", "indicator--b914947f-5851-4b63-a452-23d9c28d558b", "indicator--86acb723-e5a2-455a-80bf-fe07e55dfa08", "indicator--6731618f-3f10-4e99-8ebd-9186a8961932", "indicator--6c07ae89-657a-484a-862d-2c7aaa3bb6fa", "indicator--59b80c33-115e-48a6-ad51-28627678a58d", "indicator--6540c0b1-0cdd-44fe-a2c0-83a5eb3664b8", "indicator--747644e4-329f-4c1e-83f6-fe8b44803918", "indicator--1ea745ab-a13e-4b34-886f-1b6f354c5998", "indicator--48336140-fc63-4a95-8265-47d73051ab9f", "indicator--0d37925b-39c0-43ea-91d3-b3e1e578b685", "indicator--a5d5c9c2-524f-4b6a-b133-fb1b6ce4777e", "indicator--cac9682a-723a-46bc-8645-002e302466a2", "indicator--e2dc9187-946a-4f6a-96ad-035f9c9c3be3", "indicator--f07ea432-6ddd-4519-bd0a-6acc9cc52939", "indicator--707bbbf9-b831-4929-a34e-f1d2539785b8", "indicator--260f16cd-b9b1-4d92-8448-5948defce1d5", "indicator--66312214-b6eb-4aa5-993d-9df4ffafe2b7", "indicator--b182ce2e-44f7-459f-b80e-9bb46ad95b93", "indicator--a16d7fbe-8985-469b-bab8-0bc11d2bca69", "indicator--ceba9ccd-1a7c-45d1-81f3-82138b49dbaa", "indicator--bd761e83-36a5-4a70-b398-8746de8084e2", "indicator--4b858c2d-dcbc-42d0-9864-108d50503826", "indicator--97c1a079-75c0-4820-96e0-edc34e2905dc", "indicator--921e9e26-22cc-434b-8725-7667925714fc", "indicator--f9e24b96-b178-4180-b115-2d1388ad4258", "indicator--3848801c-4ae8-43b3-8150-697abc98841e", "indicator--99404aa9-3b8a-46d3-a942-41a042a7e002", "indicator--5dce3230-2fff-4b44-b013-7ac0e0920415", "indicator--ebd42e83-8f8c-4b55-9340-5ef24fe06033", "indicator--1198f21a-89f5-4024-af5e-4f314acd1c04", "indicator--e1decdb4-7657-4903-b8f4-0ddec429b623", "indicator--4bea1ea7-8923-4b63-a1f6-dbef342bda4b", "indicator--bec98451-04dc-49a4-8c61-71e922709d8b", "indicator--a76a6846-3dd2-426a-97da-3936b41e56ff", "indicator--02f68677-42dd-460f-b869-7a7e770f9804", "indicator--295ba64e-cda2-491d-80e5-62a34941e653", "indicator--78896d34-a228-4eb5-8630-b55fcaa2b336", "indicator--0c410c00-eba4-4827-bc51-354590493805", "indicator--5f34ba02-1849-4198-ae14-b8f1fa093cb0", "indicator--ad277ae3-3eb3-4e3b-8d06-bf6e34194a95", "indicator--83130e2b-a4fe-4a3f-a3af-9d6d0395da8e", "indicator--ebd70d80-a269-437e-ab04-ede71434f224", "indicator--99f3575f-9ba0-4708-a218-29b00de14b90", "indicator--746185fc-633f-4d3f-9e05-a4681d3e7d4f", "indicator--6ecaa8cb-f548-4461-a000-9544b74d69be", "indicator--7fbba401-1dd3-4b3f-b905-76e7f185ecf8", "indicator--b3e774a5-d367-4c2c-9b25-b8de20039707", "indicator--3d2dae9c-88c9-4b49-b19e-84df1c5d6563", "indicator--9a15ef22-54bb-4ae2-b518-a32f83a6068f", "indicator--33a692d0-fe2d-4fd4-8cc5-7f5254c7182a", "indicator--0491d254-379b-45e4-bf2f-ecdf8f50e68f", "indicator--8b793640-11d1-4d06-acef-9d126bf2e1bc", "indicator--ebec5272-995d-468e-a5a7-b92a4c5addcc", "indicator--bf074fa9-4c64-4df0-838d-23ad60ddec3c", "indicator--decb17ea-bb0d-4bed-9625-d6990d8a204f", "indicator--bdb73d0a-b123-46d1-8646-f987dfac4768", "indicator--7e12d652-ff2a-402f-8216-626a6b00b478", "indicator--31e3a105-2a3e-4b18-bdf9-e36acc4fdd7c", "indicator--0b139620-daf3-4632-8ab6-6584d0c64c1e", "indicator--ab508e0b-3cbf-4f16-8b7d-6dc7ec660b7d", "indicator--0b5ef76a-c4fa-4db3-9332-560adea0ec58", "indicator--7910d8f6-22c4-4db4-9ea9-bac52f2e40c2", "indicator--d3928822-d7fa-4eec-972d-5385b9aee8e2", "indicator--cd5e5a8a-398b-4fb6-81cb-942a158ad6a9", "indicator--988e27f8-47c9-4e09-9673-ee726f41f3eb", "indicator--f0da20b6-524f-4b92-9d50-a8747fa2233c", "indicator--0a803686-d4f0-4137-9800-30e6d1d336c7", "indicator--99f28f4b-1832-4b9d-a067-4a6ae3b30f51", "indicator--84edeb09-b30e-44a6-8e17-850fc029c7a5", "indicator--a8c90044-1c10-49d4-a9d5-549ba0819c3e", "indicator--6ee3d8ba-0a0f-43a3-8459-58316f47462e", "indicator--daf3cba1-f555-4fbc-ac48-5c4155640348", "indicator--81850864-4b3d-403e-81ba-6e4994d7261b", "indicator--c01e0fe9-ea00-4467-868e-734dce7c9e73", "indicator--16596552-1d9b-4364-a75d-6f1b00f62c6f", "indicator--c6715e82-93f0-452f-9131-3aa1f2588d2f", "indicator--b51ab60a-56b6-458d-a73f-ef75662541e3", "indicator--be247966-804f-44ad-9508-28b1dfa387b9", "indicator--61c06188-4a4b-496d-9966-705e6a2b3e99", "indicator--3774a292-932c-4e98-8973-7ae0febc52d3", "indicator--2c6de4c8-50e9-4418-a9bd-8c61b79aea24", "indicator--9e236e66-02af-46a4-ba11-5771bcc367ec", "indicator--5bde7f90-548d-48ca-842f-0ee1b02c29e7", "indicator--ce78de27-9c15-4b53-bf03-8b785d062dc8", "indicator--904385ef-b9d2-4c3d-a4ea-29a3e0965519", "indicator--36011f9b-889f-4f26-9265-2471df0781e8", "indicator--2293a566-6398-48cc-87fb-926f829a6e8d", "indicator--352645f0-2516-48f0-bae6-f99705eefe72", "indicator--1cb81f67-8da7-4b70-91a7-0c6dd2061ff2", "indicator--feab3460-2da6-4770-a37e-d68b64d654c9", "indicator--88a4fc49-cc13-4536-94b4-2efb8d545ad3", "indicator--69224241-a553-46fd-8456-7ceed50a89c6", "indicator--516dc80d-d4f8-4e7f-ad91-f778832b739a", "indicator--3e110f85-caeb-496f-9ead-38413451140f", "indicator--b2086bf4-ecef-4673-b549-678881c68a2a", "indicator--5161e874-94ac-475f-acc0-f0edda9b5fe4", "indicator--2aa7370b-5452-4812-a54d-fe05038c2ee8", "indicator--35882dec-5838-4d0e-b100-e31bb788ec5e", "indicator--bc1bb8ff-b36c-45d6-bd3a-80185d3b9fd4", "indicator--09de0779-3d87-4b79-ba90-969c6629df19", "indicator--3b100233-5e4c-41f0-9f6f-542c1d104ab9", "indicator--561ee3ea-e476-4c4a-941f-231005701e2d", "indicator--c60641c2-d990-4069-b657-fabcc81bc13e", "indicator--7c8d89eb-42bb-4621-b4ac-8c2d305b51d6", "indicator--77e7bfde-5a2f-4fec-add0-e66d67ca6dc6", "indicator--d5858d80-afb0-43ab-8a95-12db3f15cd3f", "indicator--edf3b56d-2d3a-4b9d-ae61-584e18d79150", "indicator--8bd45c79-5b65-4b51-91da-d8d1c4437e83", "indicator--893f0139-558a-4110-8b1e-67af9a68e967", "indicator--f4bee417-0bfd-497c-a34f-4b33ed6d0351", "indicator--c96667c4-8ef2-4913-9367-6867f25a4e4e", "indicator--ec23bd6c-e988-467f-b4a5-bf0e0c78ac3e", "indicator--c1b46cf3-b51e-4372-861f-9024a1a560ba", "indicator--76cd16af-a4da-4d87-841a-b93043c25eec", "indicator--4b705817-709c-47cb-9287-edabf6e5ccd9", "indicator--7d0ffb18-21f7-4c33-82c4-35e053b6b12f", "indicator--8aa8fd8a-aec1-4acc-b911-ccf901e0a18f", "indicator--c6508e31-0323-4e63-ab10-17c802e61f1e", "indicator--d696eca4-056f-45b4-9233-9a05d3b3c684", "indicator--272e2eb5-ed8f-4240-9d8a-8978a9bb5ba8", "indicator--8870f0eb-94cb-4fdc-86bb-7681c36064b3", "indicator--b9df5336-51f6-4219-a972-24cf30d44883", "indicator--c77db93d-db4a-4058-afe8-6f6fbdea7011", "indicator--b7da89a3-ed6d-4ad2-a8d4-d5dff9fbcb10", "indicator--4e45e3d3-760d-47fd-b631-f4decee4dcc5", "indicator--02bd29ec-16ef-41a1-bf57-43a838c9b66c", "indicator--5c66d5dd-4f1d-4ac2-ac32-9383ae954200", "indicator--c251bfc4-77a8-445b-a05e-87e4b5b9c6b5", "indicator--26c180be-0d64-4967-84d5-a52739f15f4c", "indicator--e05758b7-24d6-493d-809c-c53b5f105579", "indicator--05bb6f54-92c9-486c-88f4-44be19917d28", "indicator--b602d21d-b84d-4996-8229-845493ea7c26", "indicator--6942fe3c-62af-4ebd-bb7d-e0db3531f6ae", "indicator--23420da3-730b-4ee0-b4c2-ec66eb899198", "indicator--f16cb0b2-c174-4d4f-80f4-019f872134ae", "indicator--d3c745fd-dd3c-428f-90af-7cd5d5268a5a", "indicator--bd99334d-4202-425c-877a-a42351df1881", "indicator--0fce1c68-2ff4-422e-b2a5-14af9d1ec24a", "indicator--472e0fdf-2cb6-4f03-9269-7b7c6da49c2f", "indicator--036bf97a-ccac-479e-8fb0-a2140f79218f", "indicator--a2861b27-231f-486d-aec0-5770aac75ca2", "indicator--59b482ad-0ecc-4c15-a405-e4562ee35852", "indicator--59bfb45d-1aab-4960-9828-605d30b1f021", "indicator--5e79409c-e54f-4a39-99c6-16fa516de63e", "indicator--e0f5d963-0139-44f5-a146-e8e5ec0928b2", "indicator--b0023378-4d37-4df1-9a6c-41924962198e", "indicator--01445c88-ebe0-457c-9769-692c69526385", "indicator--62231650-8585-445f-a605-713813db7f0e", "indicator--d57e491a-1d16-4076-8c50-f94ef28f1e36", "indicator--819510fc-0119-49da-8afc-f8a0db15ab39", "indicator--738a7c9e-57ed-4504-a29f-70d9a524fc0e", "indicator--3de063d0-5d9c-404a-b8df-a9b3fdf20a96", "indicator--0376773a-5f75-43d6-a04e-05b908ded68b", "indicator--e23c490b-60a5-44c8-aa4d-68152a79d0b3", "indicator--4123a513-e730-4ea4-9d56-92d69b4af09a", "indicator--7ddbdd05-3dc4-4952-91a7-cbb9129107e7", "indicator--6310cd66-b33d-42b1-a80c-b53e35b9966f", "indicator--26a29cc4-1d3d-43c5-889e-67e60d960f3e", "indicator--ab606652-df66-40ed-8870-f4a3b5bdc296", "indicator--87689f51-3518-43a5-af04-1e7fbddc0077", "indicator--9806a79d-155f-4362-a9fc-0b565c69fdf6", "indicator--58bb8bb0-7b79-4661-a13e-bcfaa2337002", "indicator--e255592c-7a42-4688-83b1-016a823e1d86", "indicator--33958adb-80dc-4770-990c-15c86b70e2cf", "indicator--18a74045-d7b7-4ada-83f5-75faf3e7d5f5", "indicator--150ade14-8605-4e94-8ef5-d85f78ef51f6", "indicator--2b965bd3-65af-4a66-b5d2-4309ea6527a0", "indicator--e56a59c4-3d66-4d5e-b419-c3e64c6a06e7", "indicator--7cda69a0-10ec-4268-9663-566bd440f2ed", "indicator--d82db83c-8267-4dc9-8a6d-341cd6d79862", "indicator--0aa61b88-a4f0-4cd5-8354-3820f0f5d6c5", "indicator--5d488126-9445-4817-9355-424ceca93578", "indicator--4a70ffdd-9875-4967-b2e3-3ae88c768cc0", "indicator--cc634732-046e-4c0f-8847-77b7b2d51793", "indicator--119f7b1c-0461-43d2-acf6-87556d800231", "indicator--09431a1f-a6ca-4379-a7ae-a81a26f39918", "indicator--b4f7ce04-fd5a-4d6b-8d1a-b1fcb9b13b0f", "indicator--298ac6c2-430f-4a3c-b4f6-34fe9cefb0f7", "indicator--4e88dc52-3043-413b-9158-614b85ad5661", "indicator--d73349a3-347e-44b8-94c8-867cd2e7b85b", "indicator--4679652f-03ec-495f-a027-f5e88142b4ee", "indicator--74551fa2-945b-43b3-85d0-824f52b71bb7", "indicator--f34bf972-3030-4894-b228-0b12444a4f0c", "indicator--ccb48367-0a5f-441d-829c-6fb4f6fa834e", "indicator--c641f135-38e8-4620-bdae-b2018468bf83", "indicator--873ff3d9-bb02-49a8-adc9-aba5e81797d4", "indicator--d3162d15-2d07-4c91-b16d-cde3638457aa", "indicator--2ff597e6-ff57-430f-a949-5e48cf838ed8", "indicator--5eb3b642-0269-46e2-8ee7-4970a82e7eb1", "indicator--d53a3864-74e3-485d-8c50-31999fbde510", "indicator--f6cb3c09-52f0-437d-a9e3-fd9096c66898", "indicator--a2ee686e-bc17-4dc8-8503-6c1c371cd61b", "indicator--3878a738-508c-420f-9cf1-8fcf2c7a6ee8", "indicator--ee8b076e-154a-4956-ba96-76584230d489", "indicator--26be4443-e654-45a5-ba48-33fc673e4eca", "indicator--78aa45e5-8b05-43ae-9fa9-de44cc50ff80", "indicator--aa02d695-da64-49e0-aa5b-4eecff7485db", "indicator--c1eb8a25-bb55-433d-9d55-cb5a5340db58", "indicator--92cc54c7-e903-401a-9653-7b418ade2867", "indicator--d5564e3c-ca0d-4c13-a365-b94a11305bc8", "indicator--92075380-7672-406b-9a86-dec661a0e945", "indicator--95b1f4ce-84f3-4f02-a7a5-b7494608be48", "indicator--6ff0140b-927a-4dc8-a481-ed2338e4518d", "indicator--04291dfe-f337-4f13-a87c-c4485304d243", "indicator--8c2844d0-2037-4821-8294-8ee756681955", "indicator--f710fc39-fe5a-41ef-817a-ee6411f21499", "indicator--10ce2805-8409-4060-8c4c-4f5065bd7f87", "indicator--e1d91bc8-d769-4bd0-8d03-4fd4a7fab78a", "indicator--057ac73d-cc6b-4664-afc8-30ef908051e4", "indicator--18a34760-5f10-45fa-849d-63d7d444c46c", "indicator--4c2a4c51-ec98-4d27-a890-01cc365faf94", "indicator--7704c4a4-2de5-4526-bd9f-e0c6d26c19c8", "indicator--9e92300a-c814-4ed2-bae7-40825a5c8952", "indicator--d1ba585b-6caa-4d93-82b8-764951afcfee", "indicator--3f85681e-9d77-401d-a929-3f7e74ed80d8", "indicator--1d4e9e03-70c9-4e1f-84a8-0af88239486c", "indicator--908a8d51-719d-4d46-a7ff-2394ae02676e", "indicator--df522ff4-5fa8-49b0-a5ac-fdf661892287", "indicator--0a9af00b-2b00-4e61-a964-cb435d7fb3f7", "indicator--349fd3a3-2585-4f59-b9f8-c867bcc1cfef", "indicator--5aca44b9-1d0e-442f-b625-44f8c3fe2943", "indicator--b85710a8-595a-47c3-8f57-c80e6546f868", "indicator--75ab887e-d1ed-401e-a4d5-a31f9b26ee01", "indicator--35d6e34e-44dc-4dee-905b-4a6c7dd7cad1", "indicator--a9856bfa-0c7c-495b-a920-c6609792cb2d", "indicator--9ff6bd3b-0666-49f9-a2ba-00917356df11", "indicator--47c297df-5dde-4fc3-af09-3336df5af118", "indicator--b29d65c8-00f2-4c73-b680-d8f0615e065a", "indicator--8724489f-a9e3-4c97-8588-18c395f823f7", "indicator--f0d70971-e261-4883-9be2-c38490b561d0", "indicator--92a13e29-0014-4458-a52e-fcaf6b22c912", "indicator--5bc33000-20d6-4187-aa2c-943ba5486b5f", "indicator--249cb382-a5b2-4c22-bce3-1d2b1b3269ae", "indicator--d7ef5565-bf33-4c10-8f66-ac0d18fb0813", "indicator--55960eb0-d65e-4caf-ba0b-15d7e8d350e3", "indicator--fc3c491d-0e6c-4b0f-af3f-0fe05ba717c6", "indicator--ac18f37d-d478-4b77-8203-2bcb3b1985de", "indicator--cb204db9-07a0-4f52-9aba-7a2a912b601a", "indicator--5ee02328-6816-4784-a542-4b319c3dd701", "indicator--219db08c-9bf9-4205-8726-8dd171c87422", "indicator--38d25903-4ebd-44c0-b26a-32eb97244c23", "indicator--6a223477-6f46-4229-88bb-10c644f9da32", "indicator--be159d19-bc66-4ea1-8502-cb950244ce83", "indicator--17e82b80-597c-4d6f-b794-bcea58911464", "indicator--a139b124-500c-4e31-a83f-bb352ff4f9ce", "indicator--9dd99ad3-e075-43bc-b067-13f4afb34a11", "indicator--2e80f3b6-6bab-4850-a0d6-8e8d02b6e1a9", "indicator--827649dd-718e-47b0-a278-f63f6c337e10", "indicator--6471a195-9990-41cc-84b3-f064b1e428a9", "indicator--04d2e724-272c-42eb-a18c-93a0df7ee92e", "indicator--f77028ee-d98d-47ed-bd12-0e0df045bea9", "indicator--9aba4853-226a-4afe-a18c-9bfb6daeb375", "indicator--cf571d21-8d03-429d-aa69-17e064cfe075", "indicator--6b915bbc-9799-4058-82b2-82cf097aca5a", "indicator--81f35dd9-ccab-4ef8-85ed-f7177ad209b4", "indicator--52d0fdd4-ea62-43de-a2d4-680ca7fe1fc1", "indicator--e6b48bfe-cd2e-4b9a-b34a-5fa733137a16", "indicator--2899805a-b31c-496c-bb7e-c2b4a3075ea0", "indicator--a384c3b0-fe4c-47b0-a142-6a7630b92bed", "indicator--78112fda-61f7-4659-985f-aad4dbca1bd8", "indicator--11e5ba84-6f16-4014-8726-e38fe1ffc8b4", "indicator--04208078-2265-420c-9ac3-f07a1faae9b2", "indicator--cba459b8-2f32-452c-93cd-673fe97f8f78", "indicator--c5545cf7-12d8-4daa-b970-e12a34f2c11a", "indicator--7e2b748a-a0f4-4b21-866b-51ae29a988b7", "indicator--25371893-887c-4035-b29f-e6be35d9746a", "indicator--ebacbb56-99af-451b-b3d9-4a665d987c4d", "indicator--acc2934e-dafc-404b-a584-c38b5fac135b", "indicator--f1373294-68d1-4bf0-8d86-a5ae83b038c7", "indicator--388c8895-686a-4fe2-a513-12c38fbcd3c8", "indicator--a098b9df-fed3-4aa0-9f1f-7c246faa85fe", "indicator--eb38bc24-bfe9-4d1a-9b80-76f35c4d377b", "indicator--617d4f4b-9f4e-4e7d-9a7b-866857fe54da", "indicator--c9bad390-a8f0-4083-879d-7a7149f224ea", "indicator--fe2c9f31-b243-437c-9c30-2e7c126035b4", "indicator--d01b1b4c-0f7c-44dc-92b8-1a2a71e5e23e", "indicator--450a6f76-3dd2-4522-be03-93b6c3f93849", "indicator--ecd47b9c-5895-4610-ae70-4718c019d66c", "indicator--7ba62bd6-0df2-457f-9b18-1d1094b06467", "indicator--3fd53485-ddc5-4d6a-a62d-4b2750c9cdb9", "indicator--2a3628d3-fee8-44c6-bbfb-09c2415aa6ae", "indicator--608e5d89-2261-4ceb-830b-21d9f84f02c8", "indicator--9311355d-f6ab-4803-bbc4-bde1f9999f0f", "indicator--8bb8a9b4-8ef6-4a8b-b582-1a53a17ae680", "indicator--5755fd6c-33b1-4b97-a47b-52ea12e7e278", "indicator--7afa5e08-72b3-4a89-a67d-c485b0fb5d02", "indicator--e98c7c37-aec9-47fc-86e1-7b61c7c9021c", "indicator--5296aed4-612c-4444-9c0e-cc890676263f", "indicator--a92a68d0-797a-4135-946f-e8946195439c", "indicator--1200171a-8ce6-465e-b37c-9bf5e1d43c76", "indicator--4ca4d28b-1209-4cbb-acda-e3ee783c1409", "indicator--a7427f11-7472-4612-afdd-3538734fb8ab", "indicator--9be56fff-4a5c-48b5-99c4-9ba77dcea1ce", "indicator--39fc2f72-72f4-435b-89e9-3d847bdad4f6", "indicator--71ecf60e-b645-4455-91a2-15bfd520c8a6", "indicator--569e5ea9-d1d4-4900-9c70-d673a75619f7", "indicator--f160d729-6873-4330-b167-11756f410ed3", "indicator--a033a460-26e1-455e-a499-27ffd38bd82c", "indicator--54b9ebf5-2698-4dbe-88b7-50a3ff19622b", "indicator--78fa980c-188c-44a5-8e27-b3bab0aa6d4c", "indicator--68216966-15af-499d-82f0-40f7484c7f71", "indicator--d7b2bda5-f754-4673-8127-8a6d91a3d525", "indicator--f5114b62-57b1-44e7-913d-7236c69e75d6", "indicator--399397a4-f5e5-4dcc-9e0c-432a55626cf4", "indicator--78106875-062a-405c-bffc-8aff211a9009", "indicator--575ca14b-a54f-41bd-9510-2bf269374764", "indicator--a979c577-2fe4-4000-924c-6eefe3951ecf", "indicator--09ef9130-d25b-416a-b9ce-66d44ce15d46", "indicator--3e352f88-fdd1-4c91-a494-c01738204b0e", "indicator--221f8723-1bb4-42ac-ac8f-0309db01800b", "indicator--67c59f24-4d00-4da2-8dd0-46238a3b10a7", "indicator--59a912fb-e5bb-4079-b73f-390bdc5f5c20", "indicator--84c74bc0-e26a-46f7-b79c-cea11c215065", "indicator--476bdc04-a835-4e2b-ba3d-51e8d463eff2", "indicator--78ae2295-d275-42a4-8b9f-6914b0f7bc5d", "indicator--fd245c7b-3bfb-4f44-af25-6e3c27dadc64", "indicator--ca0b9790-78ef-4e32-b698-7b1d4824f6f7", "indicator--09330aa9-d2fc-45da-9579-e84dd524b02f", "indicator--6172f5d0-b4c6-4365-a471-9d8df3b9203a", "indicator--ee4bcd77-59de-4acc-94d8-713edae93509", "indicator--382ce2d7-131c-4363-80b3-bbbe0eeb54fd", "indicator--bb5e0682-d7c0-43fd-bee3-262e207e32a3", "indicator--23644b8b-698b-4151-88fe-19fa2a569d4a", "indicator--3dafe349-3569-44e5-af7a-a9bac1c21b44", "indicator--2213d9c2-5391-4f46-a4d8-2421394049ca", "indicator--9e45f53a-6c70-4ef6-bcb3-cc57199aa629", "indicator--18fef6b6-698a-4551-9f62-d43c7e087baf", "indicator--38927ac8-230c-42cf-88f4-0ebf80732a81", "indicator--18b3d220-d959-4263-b577-217ca125358b", "indicator--4f3799e1-2edc-4dd1-bce9-a8cafd94707a", "indicator--e2806d8c-1321-43f0-93ac-ee06c8bcb08f", "indicator--b24bf12e-e2f3-4d5b-98e5-37e580fa21f2", "indicator--965c3beb-ce0b-4539-8d1d-3ed07ff42349", "indicator--20629868-2422-42d3-b26e-7ab8ef914f88", "indicator--68ba3165-eb20-4ce5-b528-0142205849af", "indicator--958cfc15-8812-4e57-8d41-e897b64d6fc5", "indicator--b619d964-3821-4e9b-b292-c3f61d1c0e1d", "indicator--f29a5bd6-8a0d-4c4e-8308-297a550ddc3a", "indicator--3d40134c-bbeb-430c-9099-ba439001ec2f", "indicator--9e474eed-6036-4d33-b602-26c38cb147f2", "indicator--3be761bd-cc04-4188-a7ce-1079fae46f1c", "indicator--d9086bab-1b6e-4f9e-9beb-4b0be8a5f9e6", "indicator--99afa86c-4418-4dfd-85fd-93754094e94f", "indicator--9727020c-98b3-448f-bacf-aaddc07ef501", "indicator--011e11ea-c27b-4deb-8b18-d82c6f914641", "indicator--48ff5aa4-0d37-4a2c-91d3-8bd595fed8e1", "indicator--31cb63ef-160c-4c18-b13a-31889403f828", "indicator--de008492-0a4d-4e9f-94bc-0ed0aa13c52e", "indicator--736466fb-026d-4e46-a8c9-6787e4f94876", "indicator--6f31a9d6-74fc-41b8-9797-f3b1be26b737", "indicator--86e40f36-7fca-41ba-b325-6ca24cfd2a3d", "indicator--90265749-7f6d-48de-9f07-d5e2ff8c15ab", "indicator--b409c4fd-f569-4b39-a52f-6af2a6392d6b", "indicator--c40a087d-89c6-4fb3-8609-8ddeda974e2b", "indicator--f6984706-aba0-4a02-8789-7f69fe9f03a3", "indicator--6e336420-7446-4053-8b1c-1711181b69de", "indicator--a17467f4-4c4f-41c3-9ec9-3d03b1e16522", "indicator--196e0a0c-857e-4cd9-9337-5d2e3f832e98", "indicator--e0ae7d0d-ba17-43b8-95bd-f98fa8634d1f", "indicator--7c6304d8-9d8c-4a55-960e-6416cc567c86", "indicator--4cfdc088-294a-43c8-bda3-93071c86f3cf", "indicator--b4163ba1-b6b6-4384-9862-633e98a5675b", "indicator--ad356567-d362-41fd-ad01-3f6d21295254", "indicator--6a864896-f244-434e-a718-c8497c921c91", "indicator--fa473032-a1de-45eb-a6d3-c8779dea08ad", "indicator--122dc76a-0b64-4a1e-b05f-b896a64c1d08", "indicator--11d3646a-d4e9-4676-adb8-2b81db6d5e99", "indicator--11d34d2a-9f39-4b63-a2c6-7845c93cc616", "indicator--1598c34a-1b3f-42ab-8ba8-c185d5174051", "indicator--f1d066e7-6a6d-4e50-a8dc-12c95198ecc9", "indicator--f7e1adca-e1d2-4b8c-b666-a1843a36d979", "indicator--90bcc7e1-7f99-4563-8102-8c628e6c8a3a", "indicator--9009a413-44f0-41e6-864f-136bf5d1edc6", "indicator--066fc91b-7fd1-4f5a-a994-9be775680172", "indicator--fd9d8510-194e-4f93-bdb4-2d3a569b4235", "indicator--1bd7b81f-4ea7-4a70-96c5-575621d76d2d", "indicator--f9a82bd8-9ae8-43f3-a448-ee9cdedd66f1", "indicator--23188dee-28e5-4d81-8758-4c6af210a01b", "indicator--8ea5a119-bd66-4b83-9ee6-712b454617c0", "indicator--f9ec078d-fc6b-450f-a488-4393f78daaa3", "indicator--08fbb69b-cd78-4d00-9276-6dc148ec25aa", "indicator--1dbaeb60-5f00-4e37-bd65-4fb63ca4cb04", "indicator--a9afd804-c15b-4b98-836b-9d539330261a", "indicator--64d34dfc-7179-4aad-94bc-d6bc04ac4bc9", "indicator--a8d1abc1-e0d4-43c9-8347-f084f8302004", "indicator--f49da857-75cb-444d-98a2-448c9bdf6b4d", "indicator--e1c2acec-179b-4d29-a425-750ac0cc9855", "indicator--c08dd607-b5ad-474f-bec2-d80680f4898f", "indicator--c0553d49-3204-4ede-9f56-ac612b556106", "indicator--d73e2465-0c58-4be6-9e35-fb8dc4f1f382", "indicator--8ed8e6c7-f0de-4163-88a5-c097c3995002", "indicator--8b28aeea-20ee-4b8e-b338-e90421b95a21", "indicator--d85737c4-e35b-4d2a-8658-8738cc2b7fd2", "indicator--956b256c-83fe-4c52-baf5-d8d48a7a8282", "indicator--b874fe7f-fd6b-47a1-9abd-7882f19f54bc", "indicator--e02fc50b-2584-4bd3-be3f-7c32cc653e7d", "indicator--eb820119-0015-42a6-aadb-23e1157243c7", "indicator--a7107d7a-d92a-4ca8-953e-cc57db54f8c4", "indicator--fefc61de-d81f-4a65-b232-a9715df6c937", "indicator--5faa18e9-e2cc-48ad-b8d5-64efefd057c3", "indicator--2a78eb1a-ee0b-48b1-bcc8-71b66c784314", "indicator--fbfba438-9412-49db-a6a9-3af1757100f9", "indicator--63c8e890-d818-4902-920d-f2c7b7c254c8", "indicator--851bce9a-2e0d-46cc-91fa-f616a86cf030", "indicator--05a36982-770a-47ae-b16f-608a3ee73087", "indicator--c19e341b-dbe9-469b-bf73-5caf40990bdf", "indicator--02a94f43-032e-463c-9067-386209fef9ab", "indicator--8f4985d6-21c3-49b5-b026-129fefe86c9f", "indicator--df811f16-91b4-44dd-a9b5-a8fd9361d890", "indicator--064179dd-f7e5-4ed3-829c-aee8e279f62b", "indicator--4516d48a-4a8c-4019-9795-0414318720b2", "indicator--fcb12ef1-6890-4d22-aaa8-310f3c00a27f", "indicator--7c478461-9363-40dc-a89c-7f5c6a88f80d", "indicator--8a07d3db-9ce8-41e7-a6e8-79df9ad4b223", "indicator--a4cab14c-8aa5-4df9-9161-6f7e0ea27487", "indicator--d0e935a5-410a-4e40-aaeb-7a3c8aa2554e", "indicator--da1fa751-d81b-417d-b5cd-e8c06045f089", "indicator--23567e2d-28b2-43a8-b232-5aebc3f133c4", "indicator--c01cc160-f150-423e-a90f-08b95f716800", "indicator--abfdba98-d7a9-4d38-be45-8f8ac410dfa2", "indicator--709483fc-c54a-477f-91e8-763646799f41", "indicator--88fe632b-bc43-44d3-ac8e-47da8b664b31", "indicator--ce17ae0d-39a5-4122-8570-3ff56abb5f12", "indicator--930a69ef-0307-4c1c-87b2-3c7372519f89", "indicator--ea5faec6-b8ac-4400-8974-dd6cfec7c4b3", "indicator--e0d204ff-8a44-4319-a452-29082f970128", "indicator--85609bc6-a776-4a7d-9759-3888593b1556", "indicator--8430bd18-d759-4a0d-9b75-235749eff201", "indicator--19a71f7f-4632-4f18-a23d-be734255b951", "indicator--26eedffd-a591-42b5-819b-2188ab44286d", "indicator--0f2c7788-e314-4f61-8def-956faff9cb34", "indicator--dce0ff3a-80ea-48c5-90cd-8fa0c8df66a6", "indicator--ef54f406-8bdf-4d53-acae-d6166c3446ee", "indicator--0da9b51e-e551-41d8-9646-05683bf58919", "indicator--c835ad88-dc25-4083-9f27-6ed35f2730b9", "indicator--ec7165bc-118b-44b4-81e3-3950cecc124d", "indicator--0f9429a0-9597-4bf5-ac73-37683b053712", "indicator--54cf5b00-0be6-4d39-a7f3-05ee33a4b685", "indicator--f4dbc6e4-84db-404d-a720-b7e9ca28ed01", "indicator--ab229709-be96-4289-8691-7079e8b2bfda", "indicator--cc0a62c7-d4da-4552-88fc-31bdcd48e524", "indicator--d35095cd-ce63-48ff-b88f-cdcedf038002", "indicator--963ddcad-9296-4f2b-96d3-067b6eb38fb4", "indicator--84e70d59-77dc-4a2c-93c2-c15a153926d4", "indicator--d4598108-ee73-41b6-aced-e70dd23481ee", "indicator--1fe251ff-7630-4921-90aa-c11692fef38a", "indicator--ff953cb1-1ecd-413b-a16e-2d09c66c0ea6", "indicator--d36e15bf-da49-4c89-a737-614e3b97e80b", "indicator--053eb33e-1820-4abf-b321-180a551e311f", "indicator--cefc8b96-30c0-4e6b-848a-a99d3fbb85aa", "indicator--6ab3114b-0476-4661-aa34-4f6990ab388c", "indicator--9a1c7de5-3dd8-41b2-8dbe-1a77e649f40b", "indicator--06298f40-02ce-4158-b0e6-88ce312974c4", "indicator--c8a6a048-ac97-42aa-b5cc-11bbd5749eb9", "indicator--a6a08fb3-bae8-4770-b716-7bc71d207a84", "indicator--dc5f60ae-e94c-44fb-b21f-ca5c0f04db57", "indicator--0f374a40-c3f5-4da0-a430-089509ee4416", "indicator--3b423550-b797-4523-a37e-312f59f591b8", "indicator--2bfd190e-40bf-4049-964b-cc4dd10071dd", "indicator--0adef979-50a0-4c47-af1e-28c71f27f2e5", "indicator--20f5e9c7-5ff1-4c7c-8de6-9c13fc825e29", "indicator--1ce5f6df-641b-4075-ac10-104abce03c1a", "indicator--a411b447-2f82-4f46-9172-75f301f5a743", "indicator--ba91716f-2af4-4b2d-a26a-55af3395593c", "indicator--40e94ee1-321f-47ff-adce-5e7454a70279", "indicator--9239f3d3-c58d-44df-81cc-637b0197e9c3", "indicator--bd968c73-2546-4114-b899-add76ea120af", "indicator--2be46f47-38fe-49bf-9dbf-62fdb71fa066", "indicator--28a31fc2-9fdb-46ed-8c64-a3f2b58fcec8", "indicator--4d9ec332-b0ca-429c-9c59-28be03109074", "indicator--4f046de5-8a06-4c03-aff0-d7835107b0ff", "indicator--41d0459a-4096-4eee-baab-98fb4da55d08", "indicator--805bfaed-64f7-4e9f-8165-4e5d7b18574a", "indicator--b6f373dd-5005-480a-ac05-b97154fdbb3a", "indicator--3e17fb10-fdb3-41c4-b866-31f5905d6567", "indicator--dbbcd2ad-7bce-4aac-bacb-8bfb9702b1a1", "indicator--74674b1b-8835-4ce9-b8c2-63f1b0f36560", "indicator--e973c875-403a-4c3a-801f-230c8dd9c7c0", "indicator--ad9b3b02-212e-4cd0-9b0c-898b583fd2ec", "indicator--a02541ac-513f-41ec-9615-affda065f130", "indicator--21c43e5a-291d-47ac-9a18-9b18d71b2da0", "indicator--ed52ffbf-6562-4f1b-9c78-a567cdfac080", "indicator--54337e44-679e-4077-8128-0f9bff679a53", "indicator--0d084d5d-8c83-4bb2-a954-2eb1811aec49", "indicator--ab592dba-44eb-4176-89a8-f68b3d18aaa6", "indicator--6e246988-34d2-4559-88fb-33e4f78bc1eb", "indicator--e4bcf3b0-d5a4-48b5-8276-c4b4fd49ffb3", "indicator--d661d82b-1296-43db-b59b-fa8412bceffe", "indicator--1a85e893-e422-44d7-b44f-e91ddd887450", "indicator--2c4c65bc-d709-487b-a25e-9fea0d90d241", "indicator--50a15b2d-d2cf-49a7-935c-b8a8b92ade4c", "indicator--c117a0d5-112a-4e60-a2ff-4e5dea5747c8", "indicator--84939284-003d-4e98-9686-2ffafb5dbe38", "indicator--25b2b21f-9992-46d8-87bc-92a4e4995a82", "indicator--c33b6a4c-92a9-4e6d-89ef-6484f97ada6e", "indicator--4a5a91a4-bf77-4061-925e-8e99f4ea0b18", "indicator--5ab822f0-8429-4e3a-ad9b-432f08f2115b", "indicator--7a17698d-f8be-4266-9f59-f64aba0bcc92", "indicator--5a4df467-5a6c-4df8-8eee-c17e50f89149", "indicator--f33c383d-52ab-424b-a7ab-b65d7bd73afa", "indicator--5cc318fb-6bbb-43ca-b0b8-f8991b21ab14", "indicator--867be224-d72e-4495-bd63-b3e1bd8b0338", "indicator--7a9c421b-7feb-4986-b4a4-f517669dd6be", "indicator--3717ef08-da12-4d5b-a46f-3bfd0a8b3ef1", "indicator--37f5c5e6-9280-4b68-ba28-201f15d29b2d", "indicator--90cdf3ae-5471-41ed-a804-3d2a37a67589", "indicator--38a36094-08ae-4707-ac41-ff9c6d67c72c", "indicator--f598fba3-b165-4aca-9992-426269867a14", "indicator--4886515f-a09a-4812-b005-c59ddc4c474e", "indicator--27d2b7f5-16e5-4c27-8394-9b6b886a9262", "indicator--d9f41405-0c18-4192-b778-15c0de4a27b9", "indicator--14bba0b9-834c-46c5-a3e1-bff0d6b788f2", "indicator--63a1745c-ba89-42c0-a68d-dd6fdf7639a0", "indicator--107cc969-a195-464c-b1f5-c9a8c902e4f2", "indicator--01ebe13a-7ddc-4004-b3b4-f5c6fc189474", "indicator--e57ba120-8dbd-422a-b18a-6e6a5d63e6fa", "indicator--02433635-cc52-4305-8394-3913b9f25524", "indicator--7a85f6e8-5a0f-4fb1-bea3-63fca1c754ae", "indicator--5c7bae2b-ff45-4528-8e7a-53d574f2d02a", "indicator--9c0b20bd-6b53-41ab-a76b-77958509e5e7", "indicator--6617672d-610b-4611-bfc5-58485e95e9bf", "indicator--1740a653-56db-4c91-9eb5-75ca7ba2c64e", "indicator--a371ac95-7437-4b3f-879b-7f00bd5ac603", "indicator--f3e6c5de-f83b-4067-b6fa-270ac910dabe", "indicator--2815f1a2-ca7e-4878-8b8d-f2bc82f7d08d", "indicator--b25ec9be-2472-4aae-91c5-cd490ad413c7", "indicator--4a81d9ba-7991-4ce0-b9ab-d3466a471b3f", "indicator--0a15b179-36f5-4b3f-9d5b-b502bab4176a", "indicator--5c20d96f-2f4f-42c0-a38d-6a750ea228cf", "indicator--77f2ac17-09c3-48f7-8378-3d28b8229a63", "indicator--24e2d794-7401-4d30-9135-1dadd0ae85dd", "indicator--5f563252-5d5c-4529-b89f-da0b483d73c9", "indicator--8e93f79a-a6d1-4eff-a457-9a12bbf411dc", "indicator--df86c4a7-5667-45b8-a328-c679d8f90df9", "indicator--147164f7-37d6-41e5-9185-1c714978fc1e", "indicator--0fc53be7-79e8-41aa-9233-92ca1d22ab76", "indicator--733b641e-59c7-4f74-9f1c-801c7d2eb2f4", "indicator--0a03cb44-dea3-498f-b781-9772de5fbf93", "indicator--25e4da13-9a0b-4b50-be3d-f8f252d1b767", "indicator--74e07305-d6c6-410a-94c0-05588ba5def2", "indicator--78186b2d-43d4-4885-a8dc-1db43653a525", "indicator--c8cf5e36-adfc-4e2c-9295-f9916c6644f8", "indicator--5275640f-30bd-41c7-bbcb-25689bbaa51f", "indicator--bddb06d4-0f7a-45bf-82f8-fe51faa00c06", "indicator--a8964228-b768-41ac-aadc-819343d42297", "indicator--bab79374-9838-4e78-ab3a-1349d10c905a", "indicator--1e1fdf8f-d371-4e41-b075-7c130bdec88c", "indicator--fd6b2df8-86d7-46d0-ad94-96de563ada35", "indicator--af9465ef-650b-4f8c-af9b-6b6fc412473f", "indicator--2a5bb936-875a-48f2-b013-f5cec795bb7f", "indicator--ffb92bb0-8a2d-40c0-9b3d-7a7aae74fc5e", "indicator--c4cc1a40-ac49-4e0e-bb73-fd943110e44e", "indicator--8822806e-e841-4c63-b46f-a51f5ebcfecc", "indicator--53f35aa7-fa62-4d09-b691-95ebaaa044e3", "indicator--1387b657-389c-4039-9119-6bcb86c5242a", "indicator--513be0c5-7466-439b-924d-5c4d1eef2fcc", "indicator--23a3ac6d-53e3-4737-b5cf-a24e2f63027b", "indicator--5adf5a51-041a-47c3-b14b-7562cd6c94fb", "indicator--1785e03d-e796-4ae0-882a-8aed5ade8208", "indicator--e136c475-2506-4935-af7d-2f4c08ceec64", "indicator--3310b063-d14b-4a3c-b2f4-a38ea28d9674", "indicator--5dfbe2d7-bb47-474f-a809-6acd6ed12d9e", "indicator--0aa199d5-a8a0-4e50-ad42-891d9841a95f", "indicator--60ca63c7-07d4-43dc-b4b2-9c9796c8cbc4", "indicator--9b7c2e7a-1607-40d6-8d17-f4ceffab91aa", "indicator--b0a14f88-1883-4754-9a4b-d3d406c579a8", "indicator--32aa696a-a64a-4eec-b9ec-b3a95a086745", "indicator--cc85457e-a379-42cf-ae40-9d673c6f36b2", "indicator--4f807c87-9a46-4419-9e8e-aa37a842d36a", "indicator--4b61a196-cfee-4e55-96df-3a85d5a44486", "indicator--4878d45e-0666-40a9-a90a-35238dab2f2d", "indicator--e36ad403-dba8-4fcb-98e6-585a720c72fe", "indicator--b84cfe0b-8a4f-4743-96b1-84764ae2588f", "indicator--5494ae8f-da7d-4335-8d65-32014414de4b", "indicator--8b25f360-557e-43bd-87fa-bb0dfccc540b", "indicator--c05700a2-632d-41ea-98bd-6b77d6277bff", "indicator--df04ef4c-40fd-4473-89e0-3d916b5a7241", "indicator--9b68eb9e-0fb5-4c18-b5b9-7697121e251f", "indicator--ddd4d938-6171-401e-a25d-b59bfd75de8f", "indicator--008f9692-a9de-40af-9c31-40a9c8a49ff2", "indicator--793d3aa1-936f-4cda-a84f-e9a660433d1d", "indicator--acff1161-5977-4ccc-9c11-19912718d4c5", "indicator--316952bd-8fb5-4890-83d6-5d569ad125c4", "indicator--1ef05f1a-5f1d-414d-904f-aa796fa2f12e", "indicator--983b08c1-64bf-4e14-a038-ae9cfe7ec960", "indicator--6b253504-5159-4f99-bc49-aeffa158ddbf", "indicator--746ca36b-c30b-48a9-bbdd-d0962210364c", "indicator--e72ef1b1-1ee0-4e7f-beed-895803a00e9f", "indicator--86be990a-bc87-4a43-b41c-72abe4f2a97d", "indicator--b0c1220d-593d-45e5-8ba7-14e2724b802e", "indicator--e36fd359-ceda-4581-b6ba-b8b3189d1f71", "indicator--7977e265-c9bf-4c27-8c72-7b4d2328daf8", "indicator--9c2225f1-87a6-45d0-b176-dc00bcac2b91", "indicator--9307f28f-7001-4b5f-8d85-d054beebd055", "indicator--cc74b487-fe64-4dc6-87d8-1dec17f583d2", "indicator--19829ce1-c84b-43f6-a2e4-63a00251d865", "indicator--30bf4a4f-3d28-4eb8-b7e2-6c29660fe961", "indicator--98aabe10-e32c-4fd2-bda4-fdfd11aac4dd", "indicator--5f1a06f0-3de1-4aeb-8af9-0b896f4f82c6", "indicator--66ddc51a-9cb0-48de-8f82-738633cc1dec", "indicator--1ef4b234-d924-4bca-bed8-43fd7c957489", "indicator--94f846fb-77f2-4922-a6cf-65c249f37f84", "indicator--24465a45-381f-4c56-ad25-e63df753b25e", "indicator--16f38886-6550-48e1-995d-6132acf46a70", "indicator--e8c39f8b-2838-459a-ae5f-2b9abcb5604d", "indicator--a3ad9be6-74a3-4c0e-b407-de149ee3b7e1", "indicator--152f93d6-f540-40a9-b7a2-51abf1bf4733", "indicator--89cf814d-79a1-448f-8cd3-69594d4968c6", "indicator--7c535b49-db59-44eb-9914-2f566569102d", "indicator--0507c118-a33f-401e-af31-28d7da5d808d", "indicator--93588859-12b3-4ffd-8dea-c838af3449df", "indicator--73321fe2-bc8a-47a7-8782-da09dedabef9", "indicator--ea4455e1-e85a-4657-a92a-2b3dd94a2f27", "indicator--8ef25146-54f2-4ed6-b0d7-0a99142a11c4", "indicator--b097b9f5-98f8-4d26-95d6-d77f28cce38f", "indicator--a61e0cf4-9037-47f9-a4dc-901c03a4ee12", "indicator--1f4a0032-e663-4061-be6c-afe6dc0fd1c8", "indicator--8dd4252d-1a3f-461b-8cca-9ddf9d53f8ef", "indicator--45cc8e6c-b457-45f8-ab82-164985bc9e45", "indicator--3b638df1-76d2-491b-a2e1-67702b8ee46e", "indicator--adaa213e-ed0a-4252-b103-6be9b5e72844", "indicator--10f425ae-ea79-4908-8c59-1f47df6a889d", "indicator--05a4d27b-d947-4650-bd57-c8d684fdc9e4", "indicator--a77a5086-628c-4a24-9c2e-a3ec35309775", "indicator--a7b4325d-944c-41f9-a729-446277d0294d", "indicator--7621c9e1-9f19-4109-bb44-dbe6db16ddbb", "indicator--9d0841f7-7e36-4390-b7ed-39ff3e0a28d7", "indicator--df2cf3e8-6ff2-44be-b950-b2cf3f1a4c03", "indicator--4cb88d64-5dc8-4fd2-8f50-6e86206f57a1", "indicator--6a886a9e-0eff-4191-b093-adca1cb25813", "indicator--bfff53a1-772e-46e2-a664-3f88df85d5bc", "indicator--e65a5a51-51a5-4a8f-83d1-4b01617b9992", "indicator--a3670399-a8ba-420b-8897-2e005f82a1e6", "indicator--38bdcfd9-d3ee-4c6a-8ceb-9a97e3062743", "indicator--a03be6ee-063b-4872-b8af-fab34f5e3bed", "indicator--1117356d-4e80-4d73-89d8-27d63421cb0c", "indicator--4adf2cc5-8d4e-4dfd-81bf-ff14aa19e0ea", "indicator--cc98093a-78f9-4570-8f2e-a4598f28c001", "indicator--39ebbb2b-9936-4a13-910d-45b3de4ebbd2", "indicator--f9e2d0eb-b9a7-4665-ab97-088957ed92ae", "indicator--96514f66-deff-44a2-ae1f-7bb7f403a427", "indicator--c918d7ff-f615-409d-a97a-c6e9c1f75c54", "indicator--ddfd3dfb-cf32-4824-a415-f3fcef2cb016", "indicator--f853be05-45f1-4043-9262-2517bd9228eb", "indicator--ab853a45-aa29-4b49-b37b-4ed2756447d7", "indicator--39707a56-c23c-497f-9ae0-e80beea5efba", "indicator--97f4d36d-228e-4f51-b22b-f2d87772dcd1", "indicator--f861da58-4c97-481c-b567-308156765863", "indicator--f55908b1-0c7d-4bd1-b697-461369f13ab9", "indicator--a8c96fa0-d17a-4472-9fc6-af6278b93d91", "indicator--16d0d9f3-15e4-40e7-9807-54a9b244cc54", "indicator--797567a4-f924-4a85-b57a-84a9d7c39525", "indicator--656aa375-a5f8-451d-81c1-f57cbcc4eacd", "indicator--ef44f81a-4d0d-4477-baa2-49770f864a4a", "indicator--a8a44304-9d64-4cc1-b5bf-5dc4c6ba60fd", "indicator--ff36e2d9-9411-4d73-86e5-059f5872328b", "indicator--7439676f-fc87-4044-a441-cd4cc42d0751", "indicator--a5fd4d74-4673-47de-8875-5f2fcabf5166", "indicator--a1b5c86c-6f94-41e2-8a69-cc5862e0b017", "indicator--f8c57f29-020f-430d-b379-e01077c5ee99", "indicator--478674ba-cce3-4349-bd2a-625d9056480b", "indicator--229b4083-6e75-45c7-a653-a75960b98389", "indicator--29922bee-5e54-4f68-939a-660f94fe1d2c", "indicator--23d19963-55b4-4059-8acb-d0e53bf99fb3", "indicator--df0a3e4d-0ece-4ffd-92a9-3b97252acbdc", "indicator--884cdb74-b783-405f-b7cb-ec4b4f6885b4", "indicator--64e51ea1-5426-4e45-9029-9713c2bdca72", "indicator--dea0cef8-9b13-4419-9c03-522dfa19b31d", "indicator--c2f61411-7c7a-4374-9cfd-743d4996315f", "indicator--06acd2f5-0324-48f8-8463-8ff7aa9ed01f", "indicator--bc9dfb9b-2d76-4e83-a1d6-4c6f3e9ef258", "indicator--8389a010-813b-4045-9048-ec9a1be438b5", "indicator--c69612d6-fa7a-471a-8426-395790d31abe", "indicator--e43e676b-b9ef-4941-a3fe-3fc1a302a9ce", "indicator--6b0024c8-726d-4f9d-9611-3a7cc196a520", "indicator--8d404aa8-886e-452c-9b52-c40a0d44307e", "indicator--088725c9-971e-4a0f-b003-2a6caf4833c2", "indicator--1dbcf72b-56f8-490d-9fb5-8d0d32ac2e96", "indicator--3de77819-fab1-4348-adbb-78a26f1925a3", "indicator--e1e3b185-4e62-476b-b6f2-343a5d4b2459", "indicator--753fe983-a61d-4637-ae34-0f07b9d167cb", "indicator--0c5673d2-1684-4fe3-9053-604f9b210c9d", "indicator--3150b326-79b1-4511-a0ac-b80984988b33", "indicator--32baba35-b503-4afd-ac8f-7cfc8ad891da", "indicator--ef8e4bf9-1fb6-474c-832c-ca0b26271cf1", "indicator--e7286042-a720-4c4c-bba1-5c7e709631fb", "indicator--dd165f28-9157-4bd8-8ca0-24ee66882640", "indicator--f40d65f9-bca3-448c-b2cf-2ae587aac519", "indicator--593d4083-72ad-42aa-b3e6-b1b7d3ca5324", "indicator--f12580ac-ea43-4135-b3f3-e0059d25d9ee", "indicator--1474c85f-ee87-4de4-b4e0-282386af7e20", "indicator--cc7ab0f6-dd44-43f2-bded-41f96308bb2b", "indicator--54820b98-edf6-425b-9138-e53f91bddfd0", "indicator--54cb9d47-ed62-4705-a9b7-3744b9e4accc", "indicator--fc681d11-f664-4425-9a0e-bc4ae48119c7", "indicator--53e55942-cf54-4b49-a7b8-0439551fa5cd", "indicator--56dc27f4-4748-4582-b7a8-ec559d3a0a4e", "indicator--fab13c79-6fe7-480f-a413-f8cb80958b67", "indicator--58c6baf1-d74c-4c9f-a78c-9c035d753165", "indicator--c01ec01e-1d46-4054-a030-dcef3ccf9482", "indicator--74308513-c414-4cfd-b770-051678c3974b", "indicator--65e769b1-4eaf-48d3-a81b-fd39baaa5d0f", "indicator--e4f5b6bb-e3c7-4877-9819-6769bc709e7e", "indicator--e65e520f-c296-4848-9ebe-542bf28d528f", "indicator--3053f409-2b66-4c7d-b3dd-4a80c7e86d5a", "indicator--ef60eb57-18ae-4b25-ab69-d4de477c5a90", "indicator--aa0e79c6-db23-4e04-b968-52cfb6fd328d", "indicator--f215340c-4d03-4136-8a79-4a725ee5e2a5", "indicator--c0787fe3-b31d-401b-9652-27ec56d1da8a", "indicator--79e8af3c-d5b2-4a61-a4b7-88e3807f18db", "indicator--d222ce14-096e-4a67-b53e-bf14c4b91497", "indicator--69e3c0c9-41bb-4b15-9cd9-fbc1f65fdb5f", "indicator--3a86eafb-34f8-4aa1-af18-ad7d639cbb1b", "indicator--48193bb3-20c1-4e3f-b96c-524cb3fffbf1", "indicator--218f8d95-64d2-4b4a-b0ad-918fa139f7df", "indicator--acc99542-38e6-41ec-a9fc-bb269c39f32b", "indicator--64f11e1b-05af-4f67-a89b-37c3fb9484bf", "indicator--90621c79-f7dc-40d0-992a-1b2d70a05fdc", "indicator--69ae53dd-f81d-47dd-85da-5e0d4021a0d8", "indicator--c7789fa3-5caf-40d7-94df-e85a7ad0501d", "indicator--9c42f266-ba9d-4f1e-965c-6fb8d51352af", "indicator--6722eaa8-e465-405a-bd0f-c575483c572c", "indicator--58104bf4-961a-4374-af47-ac1de6f7c8ab", "indicator--450b490a-427e-4100-8bd3-de6c82e020cd", "indicator--d73e76b3-0dee-43e5-82f9-52a0cfa2d35c", "indicator--772022bf-e4cd-498f-a9c0-29d78c003a76", "indicator--32345450-dd70-4ec6-8656-8a2368ef1862", "indicator--e870d5dc-f833-49e7-881a-7d7c002fdc0d", "indicator--6b548a4d-26ed-4b0a-bdc3-cec34eb29371", "indicator--1a4d8f0e-48a3-47bb-8aea-51f3f1ab9d02", "indicator--b621284f-21de-49ed-99c5-6755ad6f5415", "indicator--86898d89-97b1-4def-a9d0-cd6859517663", "indicator--a8222bdf-2588-4739-b497-65039de5be48", "indicator--b0a27804-073b-4752-8a2e-f114d336991b", "indicator--6627dad1-d226-4c47-9c1c-7f0c10071c85", "indicator--10036f51-e475-42de-b0e1-716f980b653a", "indicator--1356a260-b48b-4e05-aff3-29aa0ffcd053", "indicator--d324ad65-d0d5-4b1a-9482-53acf0de4e60", "indicator--e0b5a36f-cc68-491e-8557-c0e9291dd46b", "indicator--988af30e-a7d1-4219-9fd9-4ae6d3c9940d", "indicator--4929734c-2907-4dd3-a886-00705b913641", "indicator--bf824e52-a266-48b1-bad1-cc54d70bbd0a", "indicator--fa45a133-5776-4e94-be7b-902bd27b81e0", "indicator--ea0eeaba-f1a0-44ce-b074-aa4daaa14d9d", "indicator--92b8b19f-62cb-44aa-aa4b-843176276072", "indicator--71e8ba90-21ac-40d4-b2d3-d12078423f34", "indicator--0def32db-35fc-48c4-ad21-73711241835e", "indicator--6de77fe1-f389-4be5-af19-4fbcb2d39c46", "indicator--26f2490f-8196-4593-ab32-4e4ae11007a0", "indicator--c63a2dea-a06b-4a79-b391-0e733fede615", "indicator--4ddc8d0d-7962-4850-bf55-df821e857adc", "indicator--4371fae7-c279-49ce-b1f2-3e921dd65697", "indicator--66059bff-3b91-4325-9164-e0ee94fc50e4", "indicator--3cee3cf7-d415-40ab-b0e1-d3d2bcc7b641", "indicator--cf5e8e8a-d0c0-4ced-ae96-2fce774a9a31", "indicator--bc38cb69-3937-43d6-83a8-87d8a90b73d2", "indicator--eb0c1d16-ecd6-4018-af8d-907d97536295", "indicator--f7e572d6-f190-4a28-8a6c-a5fb89a7991d", "indicator--efe0ba80-7f52-492c-9e42-feb75acdaf03", "indicator--a220dfb5-a2a6-412e-a651-5b224b6f3a61", "indicator--3936ea84-0cdd-4e2d-8e03-64029cb10115", "indicator--320e6f7b-2544-4acc-a9d5-f166f93839b4", "indicator--b1e297fe-0593-4d1e-8410-9923b4efc8e4", "indicator--b407b277-92c8-471b-a539-e108114e89ed", "indicator--5b11847c-06c8-49c8-9483-b045a205ce15", "indicator--1914815d-1fce-4a29-beec-be318c3caa46", "indicator--192c2214-549d-452d-b87b-4e134212dd48", "indicator--74f0e523-3b08-4ebd-9761-8914c186740a", "indicator--c4d892a6-14ce-4c4a-8c90-7d5518397d8e", "indicator--f1b62ef3-e942-40ed-ac46-c3ae16d6ca11", "indicator--860bcb81-26f0-498b-9326-aef2ddaa1fac", "indicator--ba1e85ec-ec27-41d4-9939-91165bacfde5", "indicator--04593cf5-ca41-44e8-8fa1-dc6e30e4a13c", "indicator--d80f6f70-e2d9-4d4c-90d2-8409c66d26c2", "indicator--fc04ec9c-fd1b-4da2-9fe5-3f17288ba1d5", "indicator--67df6ce6-5360-45d7-b561-f763301f51b8", "indicator--2932cbd4-3135-4696-8f71-ba8ed465db06", "indicator--2849c8c1-f127-48b7-bc1f-1ee41ac0065b", "indicator--800534d7-ce77-4530-999b-325da7ffe5fe", "indicator--d8e83f31-d77b-4d1b-beb9-f9789a2fa643", "indicator--1c2f094d-691a-413b-9f08-718e14e9c3b4", "indicator--2b8ea44a-ff43-4162-980c-7a52284bdd8d", "indicator--792470c2-b5a8-4554-adf9-fe2a85355c3a", "indicator--bb0639ed-2084-47a6-9691-6c0717895016", "indicator--72cb1ab3-4306-4fda-b175-8d9814400a0a", "indicator--07ecb872-f62c-4ad7-a49b-37d5a4444681", "indicator--fe07fbaf-381b-4200-af3f-7e3550a0c206", "indicator--8240d910-0926-4c9d-b7db-a92b9edd8f73", "indicator--aac41c79-b3f9-4484-b9e3-86d02aea13c0", "indicator--420fec55-4408-4f7f-bd4e-bf96e0353927", "indicator--f46c85f8-25d2-47a4-ae95-a7de0f8b2ccd", "indicator--600cc33d-6b1b-437b-9596-69bce3818faa", "indicator--b74b2b32-8f93-4f60-b58d-82373fb122d8", "indicator--31805c37-703d-45f5-a997-e0300d713cdb", "indicator--71f298e2-d931-4778-beb3-4b4a9f891fc6", "indicator--8fbfe33d-835b-4cd8-a51b-411c6c800abd", "indicator--94d4273b-0c8f-42b6-af27-2aecdff45faf", "indicator--a874b634-73cd-4554-ba39-65b211ef37fa", "indicator--4d35c426-111e-49d2-8f05-62fd6ee3e288", "indicator--82c8a145-2c06-458a-946f-f36e7127b9aa", "indicator--9f4d22c7-8403-4e52-9ad0-1c35945faa47", "indicator--53a57681-feb7-4016-bacf-005d0c84feac", "indicator--14dbd667-1329-4b49-914a-657e9ed40feb", "indicator--c8b5a512-1da6-43b5-962f-2d89ccacdb5e", "indicator--89420109-1425-4c3e-9626-fbddcd3433dd", "indicator--8dc8a45f-3786-4013-8103-b979f87caa6f", "indicator--f8caab32-718d-4ae3-a9c3-bdb58fa0b4de", "indicator--9585a8a1-3993-4f88-8529-7664891069cd", "indicator--43d36f6c-db58-47fe-a280-76ba84fbb92f", "indicator--1b4a8066-a626-42e5-9829-7e2bd25201c9", "indicator--c38aec48-5fbf-40dc-8fe8-8be9d3afe5c4", "indicator--f6cba71d-cca2-4c5f-a154-4717d8291e9f", "indicator--41de9660-bd6b-4b04-91cc-eb1f18e7068c", "indicator--eb8797ae-314e-460c-afa3-c2f599ad5a57", "indicator--4896616e-0f8e-4867-b845-cd3a30d8436f", "indicator--678baaac-1513-4ac5-8427-797cf1211bfc", "indicator--c16c14b5-7211-4ab1-9581-308a035d3ee8", "indicator--aed14bb0-80fc-4cc3-b68a-3869bd8cce5c", "indicator--efb1c689-fba8-4f4f-9cfb-1051fed1bb4a", "indicator--858da14c-82ba-4f5c-afb7-f7eb7a6ffcf2", "indicator--a1f5a0df-79cb-497d-a729-931fbdce5200", "indicator--b6f7babd-92a4-491a-b780-318f46a509c9", "indicator--5ad14a36-a91e-41e4-a8c7-97affedaa006", "indicator--7678c46a-0612-4de8-8fe6-d9d7764e6287", "indicator--a2d5dfb6-081a-478b-9212-5673e0d8d5cd", "indicator--c76380ca-aa73-4364-be3a-61f25caa4da8", "indicator--9bdce5c6-d773-4479-85fe-7244582600c1", "indicator--e50be5bf-aa34-4dc2-b54e-e1906462c608", "indicator--b6a40ae8-60ad-48a4-a95a-f327a8a400e8", "indicator--bb81ca4c-7eb4-4c43-aa07-f392e86d390f", "indicator--db64e4b7-d002-49ee-8930-eec90195de18", "indicator--53a50e55-1e44-4652-8088-5364a783a2d7", "indicator--587016c6-b89a-433d-9965-8a062a8dbde5", "indicator--4498b9b3-528c-4ec6-8a20-0d212eed1909", "indicator--e7a21b34-705e-43ae-a65f-14258e6d07a7", "indicator--7d469b3d-7a73-4a39-865a-25d5b60ec9ed", "indicator--d15d0b8d-e6a7-42f9-b844-4c396b9b206c", "indicator--bb654816-7367-4892-822f-bf15c93e66b0", "indicator--04782a0b-0b75-4350-9f9e-d61aa9126274", "indicator--a028b6bd-88eb-4541-a24c-ca95ac875a83", "indicator--3758daa4-1ed5-4d6a-b567-8d6e9f4659de", "indicator--e8ab38aa-e25e-4555-92c3-747645d0b6ff", "indicator--9b76393a-7c6d-4ccc-973e-80f1602c912e", "indicator--ae87c39f-68a0-4fe4-a79f-3b3cc34f179e", "indicator--1db31d62-8abf-4827-880b-bbaa3917894e", "indicator--61688bee-5223-4c24-8af6-d45db4030105", "indicator--109de744-ddc7-4ced-a06a-41f9982b169e", "indicator--22b56b4b-4f2e-43e3-83ce-150c217e0a02", "indicator--a08aa21d-81f1-43e2-a181-cdc42e5d7e78", "indicator--ac9878c9-29ab-408f-b7a9-24db07f8c6eb", "indicator--45a88f3f-af33-46b8-ab6d-77b5881c6f4e", "indicator--f23ba4cd-d2db-4853-aac2-ddd0080759a1", "indicator--63e9c7b5-b9fd-4c7d-9dd1-12d568d4a4eb", "indicator--d00b76c7-acbd-4448-929f-30e458b1056b", "indicator--99e1854c-cb48-4775-841a-18afd33a5fab", "indicator--ea3aefd5-5825-4feb-aef6-a9c527524d81", "indicator--7bb92072-a712-4b23-a619-bf9e84dc3425", "indicator--368af0fe-a7b6-4f52-b224-480f57075594", "indicator--c6ddb35a-dbc0-4e47-8606-c5d4bffa6291", "indicator--a1749449-1011-411c-909b-fae9087887c5", "indicator--cde951df-4b77-4464-8f1f-203d982eb0b7", "indicator--494dc96f-dded-494f-a04f-838a56b9278c", "indicator--2aa85aea-796f-4b9e-a517-6e84fab89ca1", "indicator--44d98c46-dcf0-4d8a-a80f-33f2c083bbd3", "indicator--a19803ef-f650-4664-83a9-bc96db2e2987", "indicator--98212fd9-58e7-4a10-b53f-6647df7ac849", "indicator--904ee35a-b890-407f-b225-9d529c04a275", "indicator--b2fadeb2-a239-454b-a165-e5fc9a370304", "indicator--6eefb614-f3d5-4e2e-a8ff-a6c713400ff7", "indicator--4d1815b2-0fc4-424e-be75-beed0ce9451f", "indicator--2da1c7d0-593c-41e8-b999-4615fb604db2", "indicator--b3a5a145-9b1c-4354-909a-d7326b3b867d", "indicator--b85ff18d-48d1-4fbe-adfd-08b0335efa15", "indicator--c03a8163-d620-4b4f-b5e7-6d881d429a38", "indicator--4cf3d79e-fafa-44b3-a2d6-54ab34ba295e", "indicator--da32384a-6e6c-4fd4-8ffb-0c81d0603d6d", "indicator--b6a29a35-6f4b-45b2-84f8-7ad52f927dee", "indicator--f977ec40-e1e0-4a60-ae8d-2e2cc6f6519b", "indicator--94e99134-9980-4f1b-be32-49d74d1c388a", "indicator--6d9956df-eab8-43a7-9ba9-c0d20c963d60", "indicator--fd66f416-4878-4093-b6d8-7cbf9ef48eda", "indicator--8abc1597-0d2a-4d83-9dae-41b425cb6792", "indicator--ccf57942-085f-4360-ab73-90a90f14ece0", "indicator--bb968a5e-52ac-4097-aa1f-cb96eddb4f96", "indicator--1de77c82-bad1-4ef8-ad2b-b60405753288", "indicator--b4c636d3-4d17-4831-9063-f86ae52cd0a7", "indicator--966e4c02-af22-4e7d-a60b-dafb7f3a8f5d", "indicator--8bb71f74-1f1c-49eb-aae1-5c1330ca3b39", "indicator--df0dc948-c2dc-4783-a2d4-4a73e8d81abb", "indicator--901287e9-2a4e-4ecb-90ce-e68f8cc7549b", "indicator--58757012-a313-4d35-9f7f-030834d5d137", "indicator--c20e8e0d-a573-4988-b7ff-25a48e5dcd71", "indicator--b48e7c7d-561e-4245-9aee-6a2d4b544cb6", "indicator--03c83098-4b0c-4b8f-8ae4-f3a5a9d9d2ca", "indicator--0a4d5dd5-8616-4edd-9984-70430afcfee0", "indicator--7e232850-e633-4143-9916-a67a45fb1672", "indicator--ab0176fd-eec8-434a-927d-b2bcb599a071", "indicator--66b0913b-0a62-4661-8f56-d385cd1a7ee6", "indicator--28c3321c-4efa-495c-83ec-d8529715d37e", "indicator--7bd02696-096d-400c-bca6-970243e16023", "indicator--e1115525-ee64-4b5e-a2b8-a95b238f6499", "indicator--191f2402-a7c1-4ce6-b0ea-1e2b694f6046", "indicator--b33fce5d-c390-496f-ad4d-a9344ba8fa2a", "indicator--588249fd-b140-40c7-8d79-6a4fce65e1ff", "indicator--4b033bd3-34a9-4cee-8328-f580a5019108", "indicator--0e131574-af83-4cd4-aff8-7e20aff3ee6f", "indicator--61dcfab1-78fb-4957-8715-0a95d3d55bd2", "indicator--34852059-4680-497d-9064-2e283820323c", "indicator--130f805f-4366-4ab8-8c29-7232838b26db", "indicator--2c029dd1-0c5e-47f7-bb96-84a52422d4bb", "indicator--61aa4298-ae08-492c-b7b5-458f7cf07b2c", "indicator--1d40126a-bbf3-4693-8880-a1d8b95ef5fd", "indicator--ed232a2a-886d-4302-9ca6-8885ccb0fb80", "indicator--0d7cfc47-8b04-495f-9311-3a4ea85902fc", "indicator--69f820b4-88b7-4d6c-a3ab-214c413d2754", "indicator--a8280010-98ad-4705-92ae-5c44ad4dbc5e", "indicator--8c8ae9a2-fe68-4ccc-9996-6c1dd0ada50c", "indicator--a4d222c0-dde8-4d2c-a1d6-949aa0311873", "indicator--fd3518ca-c118-4843-b529-cfdc96d93bc9", "indicator--2cc17b4a-cc95-4932-90df-b95cbe645302", "indicator--8d3b28fb-011c-493d-b520-451fdc4cb84e", "indicator--820e66d4-4b7d-4ee2-a308-441b628b1bb7", "indicator--244fd8ff-eedd-4735-8de0-0ae96ee2781c", "indicator--2f9b14c9-13e8-4d3b-bb20-91bbe6e19fd9", "indicator--6f037dc1-5d4a-4c59-a4c3-53155a815f3f", "indicator--f9ce8b17-8d80-474b-9ec3-f8b0b1801f23", "indicator--6bccf386-517f-4940-abd4-68ad2a00827b", "indicator--6d5f70f2-4801-4d3a-a42c-26c4466b62a6", "indicator--c7f8cda6-3249-4003-8cc9-8ac7d91b5410", "indicator--519c8afb-11f7-4a84-9072-ea3ba40f3d67", "indicator--52690288-1562-48d5-b430-3d61278952dd", "indicator--16b6002a-246c-46e8-bf75-d36747e446a1", "indicator--9c55d6b2-345b-4473-a649-89c5d0e0fea4", "indicator--1108da11-d2c3-4f6b-ae48-050a384a38ac", "indicator--7f5f3aee-7168-45f1-bf00-2e89e1f87679", "indicator--9b289311-1b85-4898-ac30-88a1cf02a04a", "indicator--108504f0-f125-45ea-b50a-e9fec9b653af", "indicator--40978387-2dae-4730-9542-07ce32cf453b", "indicator--ce5af05b-0eb6-4228-966c-0436864f35aa", "indicator--f57527e5-431e-4942-a339-73aec53ba6c7", "indicator--d0ab73ca-0f3c-4163-b461-a4d7eed61778", "indicator--c74ede41-b81c-485e-b083-1dca81b71b9b", "indicator--bc6050a5-af1a-49ea-ae72-337888bcb378", "indicator--699bf622-395b-400b-a41f-bfe087b3f330", "indicator--265ba74a-7dcb-435e-ad05-ca4b40609b30", "indicator--557a55e7-2d55-445f-b579-af72a7b6441f", "indicator--9ad5c640-3bce-47d6-9fb7-93ea9fd2b39c", "indicator--6a1c8d50-ab50-4eaa-bc3e-2928925ee009", "indicator--25f07459-61af-412f-8540-425cd29094d3", "indicator--19b2838c-f408-43a2-873a-5cb3e856a34d", "indicator--183b6f06-552b-46b3-993d-0d1d0f30bfed", "indicator--ef41a4ed-23a4-4d19-9fff-6b10c4acb7dc", "indicator--058fa845-3bf3-4b06-8832-30febc08a1ff", "indicator--98641f97-3480-4cc3-b297-284c08b02277", "indicator--e63a3745-67f2-4c82-b55f-5e06cce5ebc7", "indicator--f1d2f2db-5de9-4dd4-9b4f-1fea74aee5eb", "indicator--a282d41e-5429-4d58-9a5b-14a737d13c38", "indicator--44e3670d-c061-4ff1-b4e1-8703624b7328", "indicator--86661a0a-80c5-499f-891c-9b9baf3d10d8", "indicator--fb098d55-0098-4071-bec2-84a1c479bd8f", "indicator--3a205af8-5882-4d74-9c9d-7efcce68c9e5", "indicator--86b48bf4-90fa-43a0-8d8f-d66882358a24", "indicator--ce99080b-6b0b-4001-9a9d-ff6692176803", "indicator--3212c015-2430-4c34-852a-93f268b44ca0", "indicator--d09aca69-ecdc-4280-b292-804455835904", "indicator--32c0b400-73a3-4257-93f1-44494127f590", "indicator--884218ec-b3c0-4e3b-9c71-6f1934557701", "indicator--b49e4c85-60e3-4f04-99b7-2c40ac10da0e", "indicator--f7baedea-d2dd-49d2-8955-04b7b1b5316b", "indicator--e66b9cea-f2ad-40b0-8bac-eec186c11ee7", "indicator--d3afc8fb-f081-4cc5-8db8-e0a6f907d87f", "indicator--310711ba-ec57-44cd-9a0b-782410b128f0", "indicator--e59283b1-8202-49a5-8479-cebca6e264be", "indicator--db223983-a5f6-46cb-8955-1f299398d844", "indicator--f8911b6c-d239-4e16-bb4f-deac97bdc2b7", "indicator--fe03e50a-dff0-4b8a-8505-7a261a8c1379", "indicator--2ec834ad-d5fa-4441-a071-4427a6802746", "indicator--fb218d22-5d31-4bb6-9185-b4908e14dc1a", "indicator--bd3294ee-c995-4ff0-ab42-8431ef8c9ef6", "indicator--4e6f6bbb-4e5d-4b65-b16a-a119f589e5cc", "indicator--bd1d4494-e5df-49b6-8e90-09c8eaa63244", "indicator--8d74e323-36b8-4618-aeab-09d11384b0f1", "indicator--c07b7df4-05cf-44c2-bf41-efd0d60b9824", "indicator--67675f63-131d-416c-ac52-86cb457265f8", "indicator--e77f5bf9-8b7e-49c2-bcf4-c237abc3ec94", "indicator--118765f2-5a0a-4b53-b5f3-db750c146210", "indicator--a6823978-e4c7-4308-9900-680a5cdd5f03", "indicator--14384aea-941a-49f8-b6c6-3f501a9ae25c", "indicator--520ca7b0-9e0e-429a-ae5a-8b34287454b4", "indicator--42661bcf-de92-47e7-85ae-6ea4b304ad61", "indicator--968c77e8-7ac4-40bf-a0c4-460fd5ecd0cd", "indicator--fdf6dfbf-1255-43eb-8365-d1c0133b83b8", "indicator--e5123f75-a23e-48e7-a1a9-9c9dcf3d1059", "indicator--93109f26-b99a-4dab-ac07-079c9865aedb", "indicator--ebcb0fbd-30a6-4352-9ab7-f3f0c31a7809", "indicator--c64f2df6-9aa2-46c4-95ab-157da2c0e279", "indicator--11db776e-0449-4fa2-a809-769430c31b4d", "indicator--f2ef8b42-81d4-4bdc-ac1b-2b151b766b0e", "indicator--b1c4ff67-a687-41c1-95be-92bda5a9bc85", "indicator--ed3e4f74-d013-4395-a640-bf2474b8bae8", "indicator--5a5bdadf-95e3-4d27-afe7-0cbf8ac34144", "indicator--df2870bc-7437-41d0-931c-68b2b259f604", "indicator--27464acd-22ed-4443-9b03-98484a60be0d", "indicator--b27b27be-ed0e-4302-a13b-07aa56ddd2f3", "indicator--27e95c48-3827-4c28-bbc1-796b0b8dcad5", "indicator--a368f1c1-0f90-4764-b818-86afc716fad9", "indicator--c410a9e1-8732-48be-8107-9002f4a60292", "indicator--da90ad20-7c7c-4f60-9c39-b6426a9e2ef9", "indicator--169c7731-395b-4e64-a8a4-4d1e5b54e581", "indicator--b2394f02-bd43-4bdb-bea4-e713832b9bc5", "indicator--e94aa21a-6579-41eb-951a-6a2942eb9b86", "indicator--fbd8cbeb-3201-462c-9f8b-1bd2b774a86d", "indicator--8fefb8dd-1611-4caf-8fbd-8ed3d9ec50c4", "indicator--fd5a7213-1ca9-4db2-aa2b-9eb23405cca7", "indicator--996684fb-0578-4d18-b96b-25aa1dc65856", "indicator--a37592b1-e044-451a-9e7c-872120aca496", "indicator--86362ed7-bf15-401f-b9a1-724706eea3fb", "indicator--189e8316-97b0-4466-92dc-6e61d42ffebc", "indicator--4439b762-7afe-4d37-ad96-21dfde722b4d", "indicator--919fd9fb-4626-4275-8760-fdde910be9d0", "indicator--ed48a98f-5bff-4aea-bbaa-747060939e56", "indicator--b8833ec4-6fc4-40bd-8140-5bbb908ddfed", "indicator--4e162f62-e26a-440a-89f0-af4d5a886ef2", "indicator--0362272f-f00d-412b-9010-b99d1e443bbd", "indicator--9f64db18-3282-4fcb-a619-1e61cc18eb57", "indicator--160cda21-b0a7-4a60-b299-637e1648881e", "indicator--218998a3-db12-4009-b6d3-c82bbb66dd64", "indicator--34746eeb-2108-49ff-a4db-3b9c540dbf4b", "indicator--287c1900-5290-49e5-8340-a6937bc8dd0e", "indicator--628fd84e-7e99-496f-9683-0ede3ba0d6d0", "indicator--150478ac-8e78-4772-9008-16b6fbb88867", "indicator--72869f5c-1a04-46ba-b193-869eb5db0604", "indicator--eb90ddaa-df6b-466f-885f-7e88df7acf9e", "indicator--e70a8911-bbd4-470f-98ec-f1aa6df590a0", "indicator--9faeb2ac-717a-499d-a218-a60779d1d0ac", "indicator--cac68748-e85f-4ed2-bcfd-f9fc02c98be7", "indicator--a7a0b04b-ae34-4988-8f85-ba1747157da7", "indicator--c22636ca-5591-4413-9f12-97982e601781", "indicator--e78e34a3-2d16-4be7-a48c-e97a8c70ca59", "indicator--9cf9e654-b8ee-41b2-819a-9754156c0384", "indicator--1964dbe8-36b8-4e7b-b6f3-b863a8bef190", "indicator--896bf6e4-7025-4140-9cac-bb51a9df3b9f", "indicator--77c7ff7d-59da-400e-a94b-09e272c22342", "indicator--2f8a73b8-eaec-4ee6-9ee7-f992181bdee9", "indicator--ae111be7-655e-4885-877f-19dac852e9d3", "indicator--c07aa5aa-9145-4b6c-9463-9b51cee518af", "indicator--5c6b43b2-ccb3-4157-8c28-297005cbad7a", "indicator--d72e34a9-873b-4d32-a15b-521d510d5552", "indicator--5e69ae8d-80e2-4409-91a2-8e010ca09b22", "indicator--b4d032ef-6441-4681-9341-24268c6a7e90", "indicator--f22b5fd9-5925-4311-8993-994a3f44f897", "indicator--0bb0b8b6-da7d-4e90-8b36-677a130df851", "indicator--2b179b35-41bf-42d2-bffa-5f2806f7294f", "indicator--efac104e-f659-4b66-b031-1c507355168c", "indicator--811e14ce-7c5b-4c1d-ab1b-f34123c73ee1", "indicator--cc1156bf-ec65-49ea-8a81-a115bc8343a3", "indicator--c78038be-ed4d-485d-b124-7e0c52141630", "indicator--e6bc6394-fd38-4c88-bb7d-c3f10b89535f", "indicator--2c7998cd-6206-4070-823e-3cf22d1444ed", "indicator--7a028bfd-e5be-43fa-ab50-123000864531", "indicator--917e3c00-2278-452a-b80c-6715ecf8dfbc", "indicator--86072c67-af78-4072-88d5-4555cf87fe15", "indicator--c443703a-bf3d-4787-89d1-05bff5594a36", "indicator--34ea9a6e-f46a-4254-8807-d701a90aefbf", "indicator--926c7aa0-bc0b-440a-9ca0-99905a7aaed3", "indicator--576f9e8b-1c80-4d56-a773-121088d6c2ae", "indicator--a330b18f-57eb-46ea-b930-51fc67c7a770", "indicator--30245bff-abea-4041-a91c-a85c3c40dc68", "indicator--3b1ea9f9-b4b6-4ff4-b3f0-a69ee6815c1d", "indicator--fd7d0c75-d328-4493-88f9-569f5bcb9385", "indicator--00bc5878-c920-4adf-abac-52e4b7011ace", "indicator--67c80984-c8b2-4c08-b75d-72c95d888648", "indicator--5849f32b-f32e-428c-896d-194c52a694ed", "indicator--70aaab7f-019e-430c-ac06-4aac99de6dcc", "indicator--31b9fe35-3d4d-4f6b-8b7c-1e195216195c", "indicator--a5582845-c0f1-407b-b272-39e3a1928720", "indicator--6a417fc6-e249-4568-be03-1d598da34c27", "indicator--3ee01ba0-a86b-417f-9566-0c13a89c0ffb", "indicator--7496534b-5999-4e82-a4a6-cca2b552f3e0", "indicator--9e182e87-7aaa-4dd9-ab0f-8b5dae635437", "indicator--dd43ff6a-e3f8-42e8-a346-6d8833a35e8a", "indicator--a5f68d33-2f16-4a18-a4bd-dfd4c8ea0ebf", "indicator--286991ac-5fd3-4cfa-a91b-a91ada8c6d2e", "indicator--56ce5447-541b-4ab6-9e79-d1f66ece63b1", "indicator--abf0c4f2-372d-4f87-bef8-c74520719126", "indicator--b4faa283-08fd-4a5d-b678-eb7fe4c04896", "indicator--95a70b24-2bcd-45e3-a512-1df204abd6a3", "indicator--9102adc6-1fb5-4125-b227-b4492f54bee9", "indicator--2e96ad20-19e6-4edc-9826-b693644e4729", "indicator--7218d1db-60a2-44e2-b535-5f310407d6d2", "indicator--7d5c4295-b967-4997-86bd-d0b58db44b42", "indicator--d8668aa2-d7b5-4c0d-831d-e80acb4ef6eb", "indicator--12ed6b8a-7d0c-4969-a132-dd901b90ba7e", "indicator--b98c1465-e95f-41b0-9ee1-40bfbcd0f16f", "indicator--32f6cb1b-3ef2-4be0-af22-2ec5471f31ca", "indicator--14f181d1-e836-4e7a-87d7-258684e5150c", "indicator--36df9fc5-a211-45af-9fbf-5e3b72cd3393", "indicator--17e8eb58-90d0-41f0-a8f5-fd9b3bf60ec4", "indicator--19df01ef-bd38-4bbb-b1ff-4c097155439a", "indicator--f0e5488e-3c9d-48c9-a9dc-3ff672faeadc", "indicator--96143f4d-f34c-4824-ab31-a40b4695fe96", "indicator--7fe766b4-efbe-4780-9e25-a3786745cfe8", "indicator--b944c7e1-7cc2-4017-b479-4708378660de", "indicator--3c8bc404-0e1f-49c0-b489-b4ce548b84e5", "indicator--cc9ba564-fb09-4ddd-8eab-67c96437dc20", "indicator--cc6a50fd-bf7a-4836-bc33-48da79778313", "indicator--ca056ef1-f9b7-4d2c-aff1-6202fc30a43a", "indicator--6f91a317-f04b-413a-b7eb-617446eb81fd", "indicator--e6815248-2223-4b40-a99e-c693e8cb3c90", "indicator--16c6b48c-b4bd-4738-b433-748ad5430dd8", "indicator--771196db-1d69-467f-bfda-7e2ad0644c5b", "indicator--95e664c3-e76e-4111-968f-7ebccb8593f1", "indicator--3a539838-4cb4-482e-b676-e64c4beedd12", "indicator--e2f0822c-80dc-4b2c-a509-bb84195b7c2c", "indicator--55584155-b066-46f0-9752-c7e90e30f1e2", "indicator--9b89d196-14de-4a2e-b935-f408037a4543", "indicator--ef482de2-fa9c-4828-8dcb-f94aecfda856", "indicator--d055d245-c981-4860-b76c-1618e9d75593", "indicator--e4260461-8209-4898-a355-d99aa5ee91cc", "indicator--857f0fc1-8e23-45cf-afb0-fab2396fc1dc", "indicator--e31f1939-721d-474a-9b01-7be73d00cc6a", "indicator--1327828b-c509-49f5-ae87-f22596eca237", "indicator--5e757f95-4712-4db1-9669-2cbc9ab1b88c", "indicator--e10f98b8-0f4d-416a-ad28-f511e03f2efb", "indicator--d9333237-b673-4bdc-abd0-fde084899ee3", "indicator--afae4a1c-cb8a-420e-9726-3cbfea18981f", "indicator--bd60f4f2-ba47-4147-86d9-26fc0d76119e", "indicator--3cbb2be8-0601-4350-853a-5e73ccc8931d", "indicator--f182dd2f-22ad-4589-9330-68fc620c9898", "indicator--7473f466-956e-483a-8ec0-7d7df208fcf7", "indicator--16d52336-7039-4a50-a74d-1116aaf99ff2", "indicator--5ac63b7f-2b4e-4970-a41d-bc96007797ac", "indicator--ce63698d-90fe-4740-a407-5af6ae6f1ad6", "indicator--31e43a7a-4438-456c-8bf6-66a8cb769efb", "indicator--7992f0f8-f93c-43de-9dea-f8b27ebb954b", "indicator--c9527893-a049-49b2-9074-d9306a44acfb", "indicator--962ac832-aac6-4e62-988b-e9e950bc4da7", "indicator--13fb3669-0536-42e5-a35f-2fa17fc33f5b", "indicator--313edd8f-1c47-440e-840f-4f81478e7d5d", "indicator--2be4364d-6e24-40cc-b363-c91f05891b54", "indicator--912c507a-3039-424e-867c-ad36c15328e4", "indicator--609f11f4-829d-43b4-bd13-a847fe4bc00e", "indicator--48102efe-5feb-4988-b8f3-b62034c84b2e", "indicator--9aef68f1-3455-44f8-b82f-65c2ad59dcc5", "indicator--6437e0ec-5954-4334-b109-dd713e0f7bba", "indicator--a3354256-93b6-4dab-ac98-00ff3d27af24", "indicator--8bff4ea7-6a44-439d-afbe-159b91c2ceb1", "indicator--ff44bebf-af46-432a-a57f-f327cddb8d0e", "indicator--2fe6aad4-04b0-4346-85bd-8e006cc80651", "indicator--6ba7f8ad-224f-40fb-8a94-20f3a4ea435e", "indicator--1a900b1c-e276-4e8e-98a0-1df02f6e9d12", "indicator--593751fc-cdbc-4be1-bd27-62229942f624", "indicator--b480169c-ba37-4915-9499-7361a5fa801b", "indicator--bbd5d285-2724-42d7-a329-1066eff21e4e", "indicator--2983d4f0-b530-40b0-9997-d244bddbc683", "indicator--f5a15c59-69d0-4243-9919-cc5a6657a9d5", "indicator--fe6442eb-117f-4807-9bd8-6aa0471ec18f", "indicator--7090bf6c-c43b-4a56-9b36-cc9541e936cd", "indicator--4f230db9-d6aa-498b-80e8-42e95948dd0a", "indicator--26658b5e-9830-4b0d-a657-2cd7a9fbd882", "indicator--069818c0-8d2b-4980-9b77-7c64b1c4e2e6", "indicator--5317d417-796a-4aa4-b7f9-dc0ebcd369ed", "indicator--c912ad1c-a5bb-4ca6-b7d3-8249330ea4fb", "indicator--8804920e-8016-4d40-8985-4f2708f3f3f0", "indicator--a6ef8613-f2a9-4b35-a729-b4a845cfb165", "indicator--addb98bb-8d6a-4c79-a779-97062aa8c604", "indicator--4240a5f4-b7eb-45c6-869e-63dd2192f107", "indicator--c1de243d-ac64-486a-a38c-0026eb1e4aea", "indicator--bbadc1af-3975-47cf-b0d6-ce374404caf3", "indicator--08d586c8-c5a4-432b-90c9-e9ccd3a4bf29", "indicator--9c89dc91-2b54-44bf-8adb-36e272bc6ac8", "indicator--e1a4a839-9d57-4539-bced-de3a6d38eaf2", "indicator--b977ebef-b580-440d-be9b-64868215ddc4", "indicator--19f49a12-d451-4555-8dbe-bb5501004817", "indicator--776eff88-cff6-47c7-8a6c-21151faf017c", "indicator--8ac3759e-774d-476f-bee5-74aa0cad583e", "indicator--ddab0ca6-f243-4ece-a2f3-5b2074b7e8c0", "indicator--4cf1c241-d72d-415b-a731-6ca16d4ec24d", "indicator--23215b4c-5bc3-487d-9053-c2fed55b89b1", "indicator--4304321e-c8e1-4f51-856f-87788bea1e4e", "indicator--303bf066-e7a9-4864-adff-100c2fdcb50c", "indicator--07b4749a-2438-4797-925d-c5fa36ddb15a", "indicator--8fc79b86-1740-4504-95e2-9e4dba9d3f17", "indicator--37ad7e9e-0865-4aee-853a-aaa0e97d8a12", "indicator--c136227c-fe00-4f16-b9ea-79dfd71f7d3f", "indicator--2b3e04a5-f59f-4613-a33b-e916b3f17174", "indicator--49bbbf12-2c27-4ab2-984c-44f9323b5258", "indicator--1379ed64-af90-4aed-8e57-da6751290878", "indicator--622b3d83-9349-48d1-a17b-71f4b4e27f78", "indicator--3e47b239-6b3e-401c-b26e-3b0a4d0fcac1", "indicator--6d4e50b2-ecb7-4add-8c58-57ffcd25836f", "indicator--f5afe1d7-3a9c-4110-b298-da1856f77c9b", "indicator--8292e6b4-417b-4041-b9b1-31d5ff9a6028", "indicator--435a5507-47c8-48c8-8a7d-ee93c4ea110f", "indicator--d4421ecc-8a23-4f7f-955a-429dc4c0c2fc", "indicator--e3eecb9c-7175-47ff-8543-ec136c592ab7", "indicator--92fe9020-e9a4-4b8c-aab6-5cd3a4df75b1", "indicator--4221c5d5-0a72-48f0-a538-59f8ef4805e5", "indicator--fd790723-5fe6-4c6d-9472-2cd8aee705c0", "indicator--14202e76-10b0-44f7-9663-af9985f2fb11", "indicator--232b1fb1-4a92-4948-a2dc-e42ac1a7cf82", "indicator--3e0f4669-7b0f-4964-9ba7-f959c27d78ca", "indicator--2b2c4078-c432-4c68-acbc-2a77b497b661", "indicator--373d20ca-a207-481d-805f-ff0ed266e896", "indicator--e86c4280-03ed-4044-a916-14af17d32d96", "indicator--4da38ceb-a8ed-412d-92ab-5b0877b678bb", "indicator--0937ca54-2ca6-4621-a00d-53961c3b212b", "indicator--2d3e0624-891a-4f02-93ed-8b02cdf98aa8", "indicator--f1e953ed-e8c9-454d-b2b0-68f83dc857e2", "indicator--937e70b4-bf08-4384-85d0-6ead7960e104", "indicator--86327b94-18e7-40e7-b9d5-bfa07b6ba6cb", "indicator--854b9f35-9b2e-475f-8659-5f703cc2879a", "indicator--f5a981e8-29d6-4465-bfe9-4f078152ebc0", "indicator--c7e174f3-12ed-409a-ba85-f8f8e93019b8", "indicator--917574a7-be90-4900-a3b1-93e85daca181", "indicator--4b673879-ce81-4eb4-93c1-b974d016cc82", "indicator--0ff0699b-f72c-44df-8d53-8f80702623a4", "indicator--d7c09124-6575-4d7c-9b12-e4bfcbcf3abb", "indicator--fbf60473-9ca4-41c1-a127-3dae62fd3fc4", "indicator--cc527ce6-d21e-4256-8d20-fe5398a4c5fa", "indicator--239c7720-200a-4235-aafe-7457e86b7a99", "indicator--ff0c9fb2-a00d-46db-984b-108bb88acc0b", "indicator--646c7aba-4be3-41c5-98b3-0da87d02b661", "indicator--87643ef2-d6dd-4ddf-a2f2-9baa64010496", "indicator--3896b6f8-5f21-483d-9311-7b3f3393a775", "indicator--abc32590-4aac-41b4-ae61-c2bf3b129cae", "indicator--83e06327-648d-46ac-afa3-6ec4cad392d6", "indicator--33eda826-20a2-4bf2-8a8a-0876a96ec607", "indicator--29eb21ee-d7f7-4f74-ba96-06f1eaa5cdc2", "indicator--ed8ec08b-4e3c-4ff8-9120-b4f5ab6d198b", "indicator--c3a39028-0c18-4388-b590-f6087a38fec6", "indicator--8ed3e0ab-3234-4d47-842a-1517149febc3", "indicator--cd6e05aa-f107-4570-948a-420d673ec630", "indicator--371f67c7-56f4-481f-9cdb-68f0823eda3a", "indicator--083d48d3-877a-40e5-a8cb-18aabd57a438", "indicator--8dd56b9f-645b-4a9a-8844-c68e71c73644", "indicator--9824e853-f7dd-4c1b-9859-b951c2b367aa", "indicator--b3ca1c18-293c-4c4f-9d26-63dab9cde0fb", "indicator--9b2ae545-6306-4059-8236-806d35edb24d", "indicator--017a05a8-88ca-474e-a3d1-7373087f04d6", "indicator--deabf691-073f-4422-8584-8925dd3140a3", "indicator--ccaf79b8-5528-49e9-917d-0cf1ab7d39e6", "indicator--28a44bcb-24ea-4a3f-9e8d-493490d09fc9", "indicator--611ef80a-3bb1-4de6-9cfc-fe37b60d1920", "indicator--09eed8b9-0af4-4a06-a2c5-003dda459e5a", "indicator--5acb29e0-d280-4292-92a8-fd46e04642d9", "indicator--c87367c7-3a66-43cc-8382-9f67ad57cc1e", "indicator--5b62bb01-e599-439b-9c78-8e51761ab196", "indicator--6d9d273e-481f-44a1-b154-865a774ce57f", "indicator--8da283b2-e5d4-454e-9726-d996b389d198", "indicator--e2dc4131-8000-4b3b-8495-447035f6680b", "indicator--5d2b2bbf-f2e7-47d6-a8ea-68100aee8290", "indicator--48259bb9-b412-474c-8e50-bf6c16a6b5ad", "indicator--b7591b4e-dc81-4c6d-99dd-a33584eef3a5", "indicator--15004750-2138-47e3-b0f1-99516167883a", "indicator--a0bbec8d-7c67-4581-a1b4-d7d69eb51062", "indicator--ff915c6e-15ea-42cd-b7dd-7e4d0b5c7859", "indicator--52e1f10a-9140-4a57-83ca-335050aae1da", "indicator--983599d2-aa4f-460c-ac30-f2535ea26470", "indicator--7fe17a67-b9c0-4878-9eba-e518334b1fcb", "indicator--cb1b2398-f9bf-43c3-b4ba-b08a3f3d2dab", "indicator--7b2107b1-fe16-456c-bc40-19c603a41af8", "indicator--74b7c579-c9ee-4bfa-99a2-9bf61721525d", "indicator--6b4d083c-c4c3-4a12-b633-348621968945", "indicator--6e81c2f8-c78f-4023-96a2-8025d18789e6", "indicator--dc18c670-0aae-4a00-be17-c7cb7ef5fd5a", "indicator--d327c3ad-b125-4121-93c0-8fa5b57a1c0d", "indicator--841788e2-1d95-4ba8-ae62-5792e614cf38", "indicator--72b435a6-5ecf-4616-b4d6-28c0c0cff3f0", "indicator--aa2498e9-a6b4-4d72-a7b0-be8ff8dbca32", "indicator--012fdae6-b3fa-46b8-b946-6d085d61dd23", "indicator--63d0a390-91f2-4332-85c7-30e44cd38972", "indicator--e3a50f9d-5aef-4c7b-9835-312486aa7f19", "indicator--b9b737c5-f333-4745-9bf6-c8f3140e8f70", "indicator--7c81ccc7-4fcd-429d-8f01-d784c360da55", "indicator--3c454869-ed6b-495d-9c36-a27506081115", "relationship--0e255efa-538d-4865-9655-cdef813a441b", "indicator--a1e36119-05a3-4195-8900-a2e5a92a9728", "indicator--59c9216b-a52b-42e0-aeeb-e0ecf4182fdc", "indicator--1a828cd8-3871-4c20-81fe-e795b1796b24", "indicator--4149ceeb-fa58-4e32-8771-4dbb8eb6b5db", "indicator--3b40b32b-e172-477c-bdd9-cf54455d8cd1", "indicator--57ce79a0-3012-4393-b22a-f7c739b14af4", "indicator--94acffa9-e8f5-42f5-b3a3-3db8c6d2268b", "indicator--456b0afb-4394-4c9c-ac6f-d13a57a995ca", "indicator--0f08d46e-1d59-4646-9baa-06d0865a36c9", "indicator--a0df7398-17f5-4705-9576-e7f0fc21e244", "indicator--5014c76a-2307-4795-9100-d3b006c8575e", "indicator--fb7675bc-4b3a-426f-8ae8-493d42e94644", "indicator--b30937ff-8a8e-4ed9-b09e-49716891d49b", "indicator--148b28d2-1773-49e4-993c-862af0d2dc92", "indicator--839c4598-7b3c-4d55-a43b-a7757bf1c3a7", "indicator--9b7df025-aa4c-471c-b5cb-b6cdbbe0663a", "indicator--f86626c1-0ced-4f79-af09-94a1bc1551d2", "indicator--9ece39f5-d9f1-4931-b8ba-e05a8343e9ff", "indicator--465bf5ba-e958-4614-842d-a284ccc8b64c", "indicator--704040f9-3f66-4653-87f5-5b816f8ba34b", "indicator--659cdf41-3537-4eda-a6e6-0ccfa0d75217", "indicator--7cf348fd-332f-4310-9964-b2f51387510e", "indicator--6388e08c-a7db-4450-b61b-8527f838a39a", "indicator--617cf0a4-3106-4fca-a5c5-9ba9b00675fb", "indicator--c6d175eb-0fe7-4058-a78c-709cfc01d2fa", "indicator--7f5327e2-6701-4d18-897b-a16f26ef0833", "indicator--ad9ab043-e1b6-495d-a7e2-184f8491b12a", "indicator--464e6414-e043-403d-b65e-c224ef64faaf", "indicator--a8751d5c-d914-4ca8-92f6-57d823c970d7", "indicator--7840a9ce-1c95-462b-ad7b-b004e0bcd338", "indicator--8303a69d-261f-436d-84a2-b075b36477a2", "indicator--4991edc6-e453-4cd8-a5ad-3e42166292e4", "indicator--856c2d8e-3365-478e-8d3b-1ba0d9875adf", "indicator--d6cdf3b3-b3ad-4a6f-a102-486d7f57fd6c", "indicator--23e2eb08-6b63-4d69-9e07-5051d60f726b", "indicator--75d728b4-ae99-4a38-bbca-8e1d312444a4", "indicator--b82ff5b4-2ddb-48ba-aedf-4475cd429498", "indicator--e1f31624-4785-4665-9f02-c058af132fe9", "indicator--b46f8ea0-f2b5-413e-bde1-99bb1d71b37e", "indicator--15253271-74e2-4a2e-91eb-caf19000a0d9", "indicator--621c3f81-5945-4050-b473-55d6a122343e", "indicator--48b1df4c-47ba-41c4-9a7f-0123ca60d95d", "indicator--b543cd03-b887-4ae6-aad0-a1d13df22d2b", "indicator--3ec3a264-4664-409d-902f-a6952b660f81", "indicator--88b0e8df-e1e7-4c8b-b7ec-d1f221d5bad1", "indicator--ef244d02-8e05-4cba-9449-b66797b945bd", "indicator--040f000e-928b-4d1c-b47f-f4f1b1a06f0a", "indicator--d289f3f4-74d3-4b05-adc0-9257f52c8a86", "indicator--9eeac7d1-c0fe-4e36-927e-e66e24dfc97e", "indicator--7bf2e75b-33da-413c-9d98-068ddcd0094e", "indicator--592bbd3e-8be9-460d-a173-0623b6a4dccd", "indicator--623a2d30-d5bf-467a-9a57-abe78b631b04", "indicator--dd7c7fe0-70dc-45c1-a91d-338c62378b2c", "indicator--239ce8f4-2e1f-4f8c-84e7-ef4a9e6046c4", "indicator--e6909211-7fa7-47f5-8462-86d738612dce", "indicator--b7bfbb20-dcb7-483e-8ea9-a042a2024a6b", "indicator--6b797fe0-1d4b-4693-b4c1-1042522df8be", "indicator--e404f6ef-0864-456c-838b-03eaff03eb90", "indicator--90260914-94af-4b0d-810e-e7ea923e1fba", "indicator--ffdee531-fdea-45f6-a99c-3e5ef39f5a06", "indicator--438d371e-f6e9-4173-b281-7474d995f441", "indicator--c55340d1-fcb0-4ce2-b42d-7b96380fb4aa", "indicator--2addf01a-db4c-4cdc-a307-e5e8b199e860", "indicator--24005ba3-02ca-460b-8a25-ea3a46b2e0fc", "indicator--514483a1-68f0-4ffb-b215-14a5970755de", "indicator--e099be04-b994-4213-9564-064e07f9244c", "indicator--81a4c765-4a69-4d66-ab55-a026f96dbf78", "indicator--5f9deaad-0b07-4e26-a35e-bc5d49b2b293", "indicator--727106de-0188-4e18-9821-1469aa64aab6", "indicator--e124b045-095a-43f9-9fc9-2ae6da16f3b8", "indicator--5e22e872-54e9-4566-8c78-8f6efeb80474", "indicator--eb6ac631-5a2a-4b63-8fec-0c8ad3e3836d", "indicator--9ae79e76-20e9-44a9-91c1-1dd3f5ed3a4c", "indicator--0c7c0302-1869-4992-88b1-1a18c5602815", "indicator--627fe373-4b53-4698-a487-7ee20abf8331", "indicator--fc495f19-d289-47bf-b119-effd6dbf0463", "indicator--1d8598d7-b404-43d6-a285-9ebdcf6232cc", "indicator--40f9f406-d16d-4e2f-9ead-1ff56276ccc6", "indicator--bc81b281-3557-4608-a18d-fcda203681a6", "indicator--65e6740e-a27f-4039-acec-27141d7917f8", "indicator--54fab2d2-0501-4c14-a970-8304702c6673", "indicator--19a676bb-9be0-4a17-afd0-6c66c4b433fc", "indicator--fd712f77-323a-4f95-baca-7248c10c2013", "indicator--688f2651-b97f-4206-a5b7-add08aadb3d1", "indicator--83fb03d2-7f76-4bf9-bf42-d2f5733e4c08", "indicator--06257068-d067-4ff6-bba6-b8b34f325b1b", "indicator--d9e304d1-a827-41f8-aa77-f72b2bdc01aa", "indicator--fce07051-7a5b-4e3a-b1e1-30c6c2d63741", "indicator--e74e9c9d-6475-42cb-9f92-4c81ccc752c3", "indicator--69cae00d-2781-40e3-8d2c-3f868b2aebb7", "indicator--3ae17209-6b9e-4010-bc45-099aa9c04540", "indicator--5cef5836-01f1-420a-9a7b-3d10d4d95770", "indicator--4818c705-afdd-4adb-b25a-1c1628b54173", "indicator--d68fd067-f47e-4973-b15a-e025343b542c", "indicator--c7166897-d94e-4744-ba03-124987445a19", "indicator--f673cdb4-20d6-4e39-91c2-5575590f010c", "indicator--8b1a3c33-b007-4628-b100-1d1fa9c436fb", "indicator--bc98a91a-a2f4-4c8b-ae8d-74fb3585d8af", "indicator--91aa16b2-2789-498d-8c0e-b9e8c2dae7ea", "indicator--6fbba03d-5310-47cd-992a-14faa3d9f2fc", "indicator--3c9d11de-f5a6-45b5-a392-1bb8de785d38", "indicator--9546785b-b910-4ee7-bd31-c36c6a519466", "indicator--19302dfd-10df-41e2-94d7-26beaf5fc94f", "indicator--11b302fc-bc5b-4cde-9884-759b3fc9e95a", "indicator--d18174ff-8569-447d-8e28-cd29035d035b", "indicator--d4a650d9-e8fd-40e6-b17b-45db349fac78", "indicator--cc398982-3415-49f2-a800-fab4b6a295f0", "indicator--ebf928d2-33c1-4d67-8c78-73bb27b88593", "indicator--8076f074-09bb-4cba-aa28-b9eb8cf41169", "indicator--d6d2e88a-e43c-47b8-b286-3c508cc5ce41", "indicator--d36b96e1-c280-49d1-961b-a7d8ffa68967", "indicator--d0130eb6-0b26-4eb8-a800-07ba3607d475", "indicator--bb7f6216-866e-4baf-9308-ed455d60f112", "indicator--a441a394-32f1-430d-b5b9-bf23b9cf94d5", "indicator--ddefc47a-22de-48d3-ae99-3a39eb0ce085", "indicator--9849be9d-d0a2-4fb8-992a-92678b45dc86", "indicator--3cb38b71-e417-4d5c-9f11-e0ee27f50239", "indicator--df571b72-4251-486f-a079-5b83a9deb551", "indicator--635f38b4-afa9-4529-9517-ce8e3d29049e", "indicator--ae7f9171-37f3-437d-841d-22f8e87b0f1b", "indicator--529a9271-e29d-47d3-a630-bebb01c74027", "indicator--9a4dae19-49fe-49b0-b93d-fafb5c8758dc", "indicator--5f3793fc-1f98-4953-9028-5a6db37cb73e", "indicator--da3e12a3-59d1-4259-af0a-0a8dadeadea2", "indicator--79b3d85d-a872-484d-b493-4cf95a132402", "indicator--ac42672b-68c7-427b-83b2-ab6c586e7637", "indicator--e253b61a-ecd3-466f-9778-cd149b1d7233", "indicator--70b7c7b2-a381-474f-ab3b-5477874ddb25", "indicator--d5b309ea-8108-4954-96d9-99e85b120a1b", "indicator--8f885526-0a3d-45ab-a19e-3399f9b821ef", "indicator--c01d1c24-98c5-4656-82fc-15544074d42d", "indicator--e13f5319-66c9-4af8-80c8-1dc48336dec0", "indicator--ac8caa94-c936-4bbe-91b5-919390754f78", "indicator--f804ef47-e585-4c34-a583-7ce551837314", "indicator--ca1f00b3-bb3c-46ff-bd3d-1cbce326bd13", "indicator--e4abc601-e003-412a-aa40-ca0c1539e804", "indicator--02ed6a7b-fa0e-43e5-bf1c-03bca041d594", "indicator--21090ad9-e2a6-4077-94af-2d965ac45acb", "indicator--11451cdf-a6d3-4c0a-97e7-510443355e97", "indicator--e9043363-e6f7-45c1-8411-c317dcda8fc4", "indicator--3c382227-f2d1-4320-9a4e-1fadd32c3c13", "indicator--c9d87d7f-ccf8-46fd-a768-230b223149a0", "indicator--14313e39-bd05-44d0-9a09-ebc5917ad710", "indicator--87cd63fb-62b4-4fc6-9e5d-e2eb111c9a4e", "indicator--5e4aafd0-6ce9-4acb-be2b-f63bcfb0fa4d", "indicator--25a51347-d7b5-432a-8d4a-293c53db4d68", "indicator--685ffa64-2667-4971-b51a-7d9745e13dce", "indicator--53211967-394d-4868-9ea6-092691c9ba4d", "indicator--286e9d61-cc4a-44af-b532-8d7e3f7138d5", "indicator--b24137d1-01a3-4afd-8a3e-161948f8b8e0", "indicator--8722954d-418d-4484-ac93-f308813e7d9a", "indicator--96479910-9d75-435f-b88b-e74a3d0bc63c", "indicator--dcb55192-e8f1-4c25-a855-ceae1ecd7d67", "indicator--13560baa-5c8f-41e9-afc3-1355e4a6d5f1", "indicator--6b8639fb-3209-4e5a-be33-c2ddd13e513d", "indicator--cb914916-0eb5-4de0-b364-6bf059466362", "indicator--ef3d1f78-1d8c-464c-bac7-03c5e79d780b", "indicator--5f3cef65-c575-4cbd-b344-09f36abc9412", "indicator--918f8849-5fd1-4039-bfe1-8abdfce6b11b", "indicator--443e4cbb-5e3c-40de-b03d-80e415f6c71f", "indicator--6e1f697d-3781-4cef-b3b5-b48ebd270aaa", "indicator--589a96f3-3b60-4efa-9168-9a18bc96ddc3", "indicator--f712c906-3de2-4f04-be8f-eebb25be1943", "indicator--731d6aa3-8d51-4b30-a560-3ab927bf51a0", "indicator--4ae1470f-a2e9-4afc-8651-e9fd84e92d2c", "indicator--ac09b42d-d9be-43cf-a757-a29f8cf7b586", "indicator--b38476c0-9339-496b-9b78-2a5f811d231a", "indicator--20d72522-9d3f-429c-9b90-b124fe2cbddb", "indicator--717d262f-993a-4e04-9655-d10b65cbe675", "indicator--56458ee8-f5cc-46ab-880f-0166b780f9b5", "indicator--066b4213-f4db-476c-a89f-d773d285b009", "indicator--779c3c17-07a0-40e5-9e16-8e842244dbcc", "indicator--6e53da52-82d4-4ecb-8d7a-c324c2ecf2ba", "indicator--caf721da-271a-454e-8ebb-20bd16383275", "indicator--a8fa4727-90aa-4ca9-9392-9398c30bf644", "indicator--99e03731-0e36-4e2d-b4a8-652bce44e0cc", "indicator--1a0bc280-3be0-496e-ba71-70f675e47d93", "indicator--a9606e07-6636-4c23-b1ca-d2f07d9b662c", "indicator--0039fda7-9ac1-4c33-9123-8252f3e7e18c", "indicator--74f245c2-78e5-4467-9675-c66ff3776d31", "indicator--a84cd372-98cc-44e5-acfd-1b0a53175c21", "indicator--3654de62-b0f9-409b-97ff-8140c630e764", "indicator--a23424f0-fbcf-4fad-aacf-0a1715410704", "indicator--4319dbce-c4b9-4dd8-b2e6-1c3145cb05de", "indicator--06c7eb75-323e-46df-b503-7a20987f5c54", "indicator--aad1542b-38f5-4cee-82b2-53fed9ca249e", "indicator--85fb2287-8538-4e9d-879d-ea4a337c61fd", "indicator--58d6f30f-d53c-4df6-8e66-33b724c978b1", "indicator--f5422b0c-5c17-4409-8e5d-77d8a844b72f", "indicator--670c77af-970d-4994-b281-877794ff1f74", "indicator--b6da220f-12a0-471e-824f-6fdc6c4378cc", "indicator--08aa208c-0793-41c9-ac66-4beda10594f6", "indicator--a0c6a900-85b0-4a62-b31f-86f3ad7b9bc1", "indicator--1b58d2e2-c726-4f04-a846-219f046a566f", "indicator--9a595ce0-e66f-4144-80a2-743b03f6056b", "indicator--62c7a0e6-fabe-4d68-a656-680149879371", "indicator--a0ae5af3-d02a-4e2c-bef5-52eed7aebc32", "indicator--db1e5d18-1702-4fde-bb4f-77e3bb92dd48", "indicator--b01cf211-76f3-40ae-9404-7431db521564", "indicator--7b146b99-3f66-43c1-bce4-84a70a5b72e8", "indicator--f053850d-af65-4862-a92c-b3b006b40c3a", "indicator--a21eea12-59e4-46a4-b22b-18c7dc8f5877", "indicator--65c3d1a3-8bea-4d50-a2ec-9dfd65e57516", "indicator--05f8f62c-f0ee-4d10-a388-5d016d834a90", "indicator--5dcd569e-7cfa-495f-b7c2-b8b3d468b44e", "indicator--ea558d3f-fd24-4af2-af4c-bfe85d7c1b41", "indicator--eef80edf-da29-47eb-85a2-022efcb18447", "indicator--0ff11c68-ea28-49c4-96b0-31864a5566ea", "indicator--54de6a55-7184-4d63-b67c-0c71e9d2c9ab", "indicator--62b80d34-1339-4ca7-a077-f999bc9df3e6", "indicator--12739942-ede8-4277-8a46-bc38eee9314e", "indicator--28a41b28-1904-4b1f-9693-69ac371dd47f", "indicator--01afeb6f-f4f1-4c18-8ca6-4f1856af1300", "indicator--8542a0e1-7762-4edc-a79e-8bf21a42b967", "indicator--d9001d4c-0974-4181-82ac-460342a8d527", "indicator--6a2766e2-ba8c-46f8-afac-dc587b0cefee", "indicator--278faf07-f2c2-43da-a0b2-919621f6c551", "indicator--37ce76b5-0da7-4b0f-875f-454d59f82018", "indicator--3b6e95b4-c1d4-40e9-a8e5-48dd4430e2df", "indicator--78443491-e9c9-4ae3-a745-c8c1dbca2a09", "indicator--b1e16f82-c016-45d2-833c-23cd2aebd670", "indicator--2704bb02-fb3a-49bb-9652-77426219d0ea", "indicator--92ea55fe-3b33-4f05-8d51-b3dc372956f6", "indicator--ca0ab053-1fa9-44cc-bce1-933e058fe371", "indicator--67ced4d5-ae21-41e4-805a-be25d7a043e1", "indicator--ece9381f-dd31-4159-b572-a96cb9076994", "indicator--bc2d89f1-0af8-4c61-be05-4ce7fcf99076", "indicator--15c3d297-df69-4bdd-aa27-984baf5c0828", "indicator--978759c0-66cc-4572-9403-f07a2a96557c", "indicator--a175143e-5424-4043-8626-3b0acfa693cc", "indicator--299f35d5-e0fe-43fa-8666-f3e249032ae0", "indicator--55dc97de-01ac-44f8-bea7-1c5a5e907c5a", "indicator--e8b984c9-cb9b-457c-803b-894dc0d7d5e0", "indicator--085a4f8f-028c-46bd-9fcc-8499bf474be1", "indicator--a4850844-caf7-4a06-a48e-ebba71c3e309", "indicator--1d2d8046-0cab-4174-8e60-ecdebd781af1", "indicator--c6cca526-e67a-497d-89a3-ae28ecfa1861", "indicator--f1300a6d-0d70-4e8c-bf4c-5fea8576d46e", "indicator--f8ff4a52-e812-41d7-bc28-84e6dbe22bf4", "indicator--328c63d8-27c7-4b11-8201-257d7991d441", "indicator--5b43f8fc-68a3-4ed0-b648-1867b79b7792", "indicator--8f3f588c-c465-4d56-9b75-45352a0913a8", "indicator--2c5c67f6-2f5f-4e2e-b12a-64c05bce8772", "indicator--a7d18af7-2924-475e-9a6e-8f43fe80d071", "indicator--5faba1bd-7641-454c-ae57-99f5e6b84a92", "indicator--311b332d-0ced-4824-9e92-f9b1a112627e", "indicator--1b91d2db-1941-4a2c-bafc-bb723073968f", "indicator--f2b954b3-c18c-4731-afc7-db1eb25cc1c5", "indicator--0f12f618-6746-49a6-a6d5-c88260beb3ea", "indicator--ce9d55cb-fcac-4e6e-8406-5b60bbe2bb78", "indicator--6aebba5e-15c9-4699-9752-46f1347b250f", "indicator--1d3b8a3b-594c-4a70-bf14-4cabf392f350", "indicator--cb23d2c9-c40e-485c-adf7-5f62a4b23458", "indicator--4c72ccd4-ecb2-401b-af27-a240cc582e12", "indicator--3079f146-a89d-4cb9-87eb-33f2a3fce5d5", "indicator--f20401a1-1a29-4503-b538-cb0f55f9c18a", "indicator--fd3b112a-4d98-4cba-96df-2c5b696ecc39", "indicator--24fa4bed-0528-41fe-8746-38c52011c954", "indicator--f951d833-3413-48e7-8862-f51a99596b08", "indicator--8a627f3d-1245-4b4e-ac86-08c19f19156a", "indicator--d6f0bbf9-22d0-4d0b-affd-3bf34b8ea45a", "indicator--fafb6eea-3da9-440b-8c9e-873fc2292f25", "indicator--2562b3f0-0df6-4fba-b1bd-d0a3dced9e32", "indicator--fcb1fb19-8ba3-4346-a833-b07c0bb99715", "indicator--2281b74d-67a1-45f1-9788-e4c205ee7b41", "indicator--7f0cc4d3-b935-45e3-91c6-36fd7da141a0", "indicator--604bd95d-8349-4c37-84ba-122ec4241691", "indicator--d2cfd7c8-9a5c-4893-9771-9c7fdb55f4b8", "indicator--ad267bb2-c760-44ad-9c41-f115f79ee957", "indicator--daab58b8-f645-4817-b356-8153b7919082", "indicator--8045ef40-bfb6-40ea-b9ea-84d8995d6e22", "indicator--671b0145-147b-4c3c-b85c-f661eef9811a", "indicator--3dbea1f8-804e-4c90-b38d-af70f2972c29", "indicator--8ed094ff-7fb6-4a50-8295-386c7d79cefe", "indicator--95ba6903-b9a8-4cca-906b-fe27504a54f7", "indicator--c2b5d82f-f8ea-44c0-ad23-41c73bd5b6c3", "indicator--b417cd74-23da-4d74-b68e-4205232402ac", "indicator--19ee20f6-343e-42bb-8d78-bbc802e890ee", "indicator--a8e45d41-91d5-455c-9640-ff8caa9a60d1", "indicator--96da8b07-bd56-4223-abbf-be020e264986", "indicator--2318d7be-3222-42b7-9449-9f83f475c740", "indicator--a8f594dd-88db-492c-a645-067c5e0c500f", "indicator--4e714729-dcee-4946-bfda-7bfca31e0b68", "indicator--a2e1cacf-e6fa-471e-ba81-f71cbdbf6648", "indicator--17346209-7830-439a-8646-c01b244ea6f3", "indicator--d48ec084-3286-4509-b1d4-faee1a3fea21", "indicator--9c3d40b0-23f2-4230-99c4-b1444d0f915a", "indicator--d8f8f12e-eeb6-4b86-9f3f-38a02ac972be", "indicator--d80e72c5-0f82-4a56-ba81-4772eae08298", "indicator--33c39804-aee4-4889-bb26-5dc8dc598d4a", "indicator--95db6c97-2474-44c2-9edd-46b1f8be0460", "indicator--f01eb80b-334a-48ff-be31-68fac5182e1d", "indicator--fbf99507-d381-4128-a116-ae06a68995cb", "indicator--52b6acc9-4d62-4cec-9860-ac16821528e3", "indicator--cbe73c75-88cf-4d1c-b413-f43f9ddbf605", "indicator--706345f9-db3d-4032-8bc1-dac2232c15e3", "indicator--09fa0cf8-7534-4af6-b5c5-6b4ec27db102", "indicator--58784384-823f-4ac4-97e2-99925b76b503", "indicator--2bf74b0f-db2f-4503-ad5b-3269d3d62fc3", "indicator--899ab824-894e-41ca-8f7c-7e9d00ca4d26", "indicator--a2965c15-1a1f-4bbb-8e1b-bf2078947c25", "indicator--23b592b2-6ed1-4f8d-aa6d-1e8016b1059c", "indicator--4232338a-2241-435b-8170-4c89d1e19a9e", "indicator--8d25bdc7-dd9b-42e1-a3df-eb24b669e2b2", "indicator--863f5b88-5b71-4833-bc35-0aa09dc320b3", "indicator--5cd699ab-351e-47ba-82aa-24a0842ece89", "indicator--38b2a721-26cc-49a2-b4d0-5fb2e0b53972", "indicator--22eea3fe-60df-4f54-afb4-ba9e7602a312", "indicator--11e5dae6-e3ee-481f-8fbc-27dfcfaa4961", "indicator--bdd643e9-efb1-4a96-a986-e617f7ee41d5", "indicator--0a92a782-6865-46e6-9889-ba165347cb46", "indicator--52cf1b9f-a9f2-407f-a25a-d8b15b834119", "indicator--583d01ba-e9b5-416e-9fe0-e189fd397a8f", "indicator--381cb7a2-1a09-4314-831e-135228d6d1ca", "indicator--939b9e01-e5ab-40c3-8b62-6296f25b3f6d", "indicator--9e1f5109-b4a6-4477-8557-48ac7f5b27fd", "indicator--b6408254-a9f3-4179-b2ca-14959cf08152", "indicator--bfe02d97-2011-4f91-abd4-09a7627bf238", "indicator--ee0aca3c-0d9d-45f7-ace1-7216fa042539", "indicator--c5e452e8-8411-46b2-8a25-b8c9bfe70e4e", "indicator--88cb84fc-1e4f-4d5c-9ebf-6da0afc2fd98", "indicator--dd1b8011-1a78-4897-86b1-80f1b3a7c942", "indicator--994f9921-48c6-4e1f-b79a-3c507389d0ad", "indicator--c7eab2e9-5971-4ef8-9c09-351e60a42b2a", "indicator--91696640-576d-45d2-a830-0af0c0361766", "indicator--fb61fc31-93a2-4a2d-8f56-08c9f1d882c0", "indicator--cac50bbb-1b23-45a6-9710-0c20207566b7", "indicator--7351c3d6-34b7-4c14-ac9c-627357f75884", "indicator--f6a91b54-0eaa-4a35-878a-8ee89a7b337e", "indicator--1e7e50d3-667d-4762-9b2f-91209191c1b3", "indicator--48e302cb-ac81-4357-aab0-d46a0d2635cb", "indicator--b4c6e124-8f12-46bf-9812-b249c1cb1df4", "indicator--5cb2e1f7-88d7-4915-96eb-1800df6febd9", "indicator--52aeaa89-3e31-48b2-bb9a-097e0664a6ad", "indicator--f3afea9b-3d9d-47c3-9295-3946dd0be7d3", "indicator--7f7a29de-e3ff-44f4-a4ba-ec91241886a0", "indicator--077192ad-60c5-4013-966d-c15fac9cb1ad", "indicator--6b1684fd-bc3f-4bb1-a532-679ef15db6bd", "indicator--bddff1f9-e214-4d9d-972d-e87b96570da4", "indicator--18d65d88-a773-4d32-80d5-e4833bbdeb55", "indicator--198a7a74-497c-41d3-b12e-8526ca389061", "indicator--46b5da45-eec3-43d9-9bd6-553bc8d21d39", "indicator--abdc2d0c-3da0-4cc1-8b1e-a8eaefa8c8a2", "indicator--c90047e8-69c5-4538-a081-9e7f93e4f15b", "indicator--6bb77675-9cb3-4a86-83c8-6e09a93793b1", "indicator--9568b1ea-aba1-4187-b0ca-77fced768ee4", "indicator--e96964e5-6e06-4687-a58b-a9b5fcb37a09", "indicator--86cd448e-a704-46e3-b71d-00e80c858d46", "indicator--b27bdd14-6dea-433b-b977-b0254c0cf963", "indicator--d8e9f394-8cb0-4797-8852-466b0194e69c", "indicator--9bcaab78-831a-417b-b419-d08cd46604aa", "indicator--929907d3-e90d-42f8-ac31-d9a64f5c9c63", "indicator--f2c28e61-29e4-486a-9b2f-b685956cdc50", "indicator--d62a0202-f7e0-4da8-adc4-1eed4acace5b", "indicator--bd250737-fc9c-441a-b223-fe9afcc5282d", "indicator--8b72ba50-0059-4818-a059-97e655c78e31", "indicator--b3d1da38-21be-4d30-869b-6d4760a29597", "indicator--bd838df1-9950-4b7e-b18c-e7d8ba08a6db", "indicator--7ef426c2-2898-44f5-8d6d-ae1c7392b6e7", "indicator--33ed3d4e-31b9-4777-b784-4faa798319ac", "indicator--59c60721-d45c-47e5-9128-7f42375f11ad", "indicator--3ac7ca15-cd4f-46e0-af4b-8e165b15a290", "indicator--07d90fc4-630a-48e5-9a66-a166be9aec4c", "indicator--5bb0a359-c553-4fe0-b029-761ea0eb4ed2", "indicator--f647ecf0-edc6-4061-a416-9cefda8754ca", "indicator--ad185df0-4f21-4de9-9f60-1d3e38494a49", "indicator--6b8736b0-770a-4470-b394-9e8a95164efe", "indicator--9d793d27-d32d-4845-ad92-84e847c6b65e", "indicator--6777f42f-15ad-4e78-b7b5-524555278379", "indicator--db9cac47-1f59-46ce-a5a2-fd55bcbadb1f", "indicator--246a9f31-0e3a-4306-871a-2cbbbc9c70ba", "indicator--6d1b926b-b3c2-40d3-b896-bb0245d945eb", "indicator--1891e98e-d87d-4061-a39d-fd97e13a08b3", "indicator--afa2267d-3967-4b7e-b0a4-b3712c8bf40b", "indicator--e48e5f33-f569-4130-92f6-456b8c50e900", "indicator--2f1c772e-10a8-424d-a6be-40b6fb81f712", "indicator--efc16a09-fc8a-49e7-b092-df8e7810cb94", "indicator--6481f033-5ad2-4f37-a869-0db67a31990d", "indicator--c594d22e-787c-4717-8838-0e3786bd8f05", "indicator--08daf7ea-9d50-49ee-b57b-894766a64dbf", "indicator--2b749eeb-02bc-4cb8-b074-6c7cfa4904f3", "indicator--954377b2-e600-4458-990b-479022496ed0", "indicator--baad1990-9092-4cc7-905f-8c07849c2a09", "indicator--1a1ddf9e-3392-4338-9a61-58ffa0bf3e03", "indicator--2b84814e-4371-4b76-888c-16bce4ab884f", "indicator--6eb7ea69-9f50-47bb-bd67-a915e836c5a5", "indicator--c61b33c1-147b-4129-a625-da16e9fd091a", "indicator--80ab5078-02ad-4bf0-a1c6-89fdcff88f28", "indicator--b1bf3643-f886-4eca-a1b3-f0cb9b4f5b4b", "indicator--c59911e3-01b2-445d-8836-3cd174e1fc07", "indicator--0eb0c77b-f4b1-40b6-a210-58c5c13d0117", "indicator--ed728901-d9d6-4858-8843-a084245d7c37", "indicator--92978825-ed29-49f7-b0c6-5acc9188b32c", "indicator--b7e76c22-46d4-4ced-9d2c-ea33252416ff", "indicator--ef792b75-192d-48c1-8f90-8dc4b73e29a4", "indicator--f7c6afe6-19e0-4bd9-b81f-48a6d98170b8", "indicator--a8dd8bec-7ff8-4b7e-bda1-73654828dcd4", "indicator--bec331b3-21d2-4ac0-93f1-508e03179986", "indicator--e850ed59-911e-4d28-9950-5e9db855b1bd", "indicator--200a1386-0c74-4ed7-9f09-d8ad96468e9f", "indicator--9f802316-2506-4e25-9eb8-11d6d2179939", "indicator--bdcca7a3-18d9-4c48-85b9-07f7a6be2cd6", "indicator--0f6488fe-1f5a-451e-ade4-0a2a40e5c559", "indicator--19c221da-af4f-4091-8022-0c2ce3ba162f", "indicator--deb49060-5bd4-4d82-bb6a-81522cc92a13", "indicator--e8330709-34dd-4c45-9ab3-f1646f905e58", "indicator--a12e7935-ffbc-4cb9-b171-485936c524ff", "indicator--fa9e460e-2473-4079-adc8-1f72ef59919e", "indicator--c791ffa2-043d-4a51-9ab5-e28a59aa522f", "indicator--eaad44f2-8a4d-42a7-ba67-bb5b5785ec2b", "indicator--8c057a77-bf2b-4a75-9216-1c5575c7006d", "indicator--14be8222-6595-48cf-a926-9985c9b993bf", "indicator--31d91c44-eeb5-4a6a-a786-c6e34754ffd5", "indicator--3943f3a6-82e6-4e88-9f16-27ad654765a5", "indicator--4da4f428-94ac-4771-97a2-c13f1ad0d62c", "indicator--ccf6b8d6-b24e-41bf-a9f0-a75eaa9bc6b7", "indicator--820fadb1-f2e6-43f4-91ae-7b4cc93b833e", "indicator--e5bde192-7ea9-4def-8e46-187c02306858", "indicator--cdaa4e7e-b3a2-44f9-b03f-5e7077174564", "indicator--aa483c8f-1991-442e-9389-ee17805299c9", "indicator--ee621313-cf26-415a-bc7a-ce0bc2eadb7a", "indicator--0659fd1c-f075-41ea-b8cf-479a302764df", "indicator--554ca3b9-02f5-4b91-aa65-1f730754144b", "indicator--4e22a19d-63da-4ade-8b7f-e0e9d409180d", "indicator--193896fe-5f8a-48c0-bce4-09fe430dd72c", "indicator--4deb7338-36e6-44dd-becc-bb258efc0a47", "indicator--799574f6-32f6-4ab5-8b2c-8f6a7ba836f9", "indicator--e144b78f-40a2-4129-9214-89ba3cba01db", "indicator--6d72fb3d-aa8a-4329-8997-b124e134b330", "indicator--51a3e75c-4771-432b-be88-bbcd1f4ef6d8", "indicator--43423a75-dd5e-49f4-ac50-552ff99384fb", "indicator--a2265619-82a2-4e61-b6d9-332e95668752", "indicator--656aa6f6-47ae-4802-97fb-cce43dcccc12", "indicator--36a808bb-a29c-4352-8a6e-7858c7beb0df", "indicator--75d28121-a77d-4534-9a64-51e58290de4a", "indicator--f5b8b9ed-ba22-4fba-a3bd-5d800df83818", "indicator--b7581725-5032-4fcd-8afe-29d9dd34f6f1", "indicator--d992df0c-a93f-4405-b059-c147e4359bfe", "indicator--aebe04a4-06fb-4efd-9cd5-617a92ffc940", "indicator--37383bf0-57f7-4602-8b91-475590d759a0", "indicator--43229ae2-c625-4856-8bad-3430a497e89c", "indicator--d1a01c91-82d2-49c9-9465-0013fd145e4f", "indicator--e1e66ddb-f89d-4003-9394-336305be7410", "indicator--201664e4-79bf-4124-80ac-e261cfae7104", "indicator--4a350d94-4b4f-4c1f-b243-5790ff8448ee", "indicator--42cbffa1-2123-4f05-952d-40d5cf22dd2f", "indicator--0f893fb1-cacf-414f-9c8f-2e45cd9d12b0", "indicator--af5e50ac-9ef8-41a7-9135-bbc3f37f4ab2", "indicator--508f53ed-e3bc-46cc-82a1-adb851b80f16", "indicator--b444de24-fdbf-4b30-b076-8313af59e20a", "indicator--ac0f1a18-a9e3-447a-820b-78099436c708", "indicator--c5a29899-a7b7-4bb5-991d-ea44ab9ab2a9", "indicator--f88aa1cc-dd85-4332-9b79-ffaec6696a48", "indicator--eea37d03-3af8-4d81-8c48-40625df7971d", "indicator--9b516e0a-94ec-4e01-acd8-88f0f98ad1c3", "indicator--8794e536-491c-4f7e-a4a6-f62ce71c4891", "indicator--2ffd953e-1eaa-44d7-bbb9-d7966a48acdd", "indicator--1dd7e166-4060-43b5-a523-8af2359eb2c3", "indicator--cd1b6ef9-ccb6-4ca5-a862-efbf7b39f1ed", "indicator--804bc51e-ccd9-4500-a420-1ef9de5085a9", "indicator--117fecf5-b390-4eb0-8340-2e86123a7304", "indicator--19237357-9ce2-47b4-87f4-5fcafb65e773", "indicator--214d350e-cd48-4a39-9719-4a9dffd90f16", "indicator--ea089dcd-e1fb-488d-99c1-c9346f5be57e", "indicator--9d5f2c34-3207-4db8-ae3d-e82740e9227e", "indicator--c755e96f-9565-4544-a149-060971212f8d", "indicator--f5b14ae5-0c28-415c-aef9-1fbeb93b5991", "indicator--81e1ac89-0afa-4a2f-8b7a-2e65e70dc27e", "indicator--33d3762a-8947-4df0-965b-06cf077ecaa0", "indicator--f9cd7d0b-19dc-466f-9d62-1ad86403425d", "indicator--47f0b08a-d053-43f1-ae34-a5fbb6cf8e6b", "indicator--9e88df7a-20d2-4765-9f3b-521be6061c18", "indicator--4a10739e-12e5-4d19-b1d3-2347f7a145bd", "indicator--87b4cb5c-e90d-44d3-ad47-4d0433cd9b6b", "indicator--58e37b6e-ec0d-4349-b53a-ba24203e126f", "indicator--5ec92fe4-68c8-43d5-9328-7994f63d878a", "indicator--f44ec95c-b799-460f-b125-bacf0b63e4cb", "indicator--2b977138-5685-434e-9a54-f80b3d36ebf4", "indicator--4f20efdf-f5d5-472b-a71f-9179f54556be", "indicator--7b729872-9222-4483-94b8-825d8a3b9b17", "indicator--f7b26700-eae7-408b-ae34-72a5d2b2dcd2", "indicator--10947f14-a09d-4183-b266-db194031782d", "indicator--87e11052-f80f-4974-909c-a2936f595d3f", "indicator--9788b642-87fe-4da1-a3b0-9521ee55cbee", "indicator--e94a005e-9c0e-48dc-b735-2b72a8627c09", "indicator--ec3194ea-dcbe-440d-a8b7-f9cf99c773d5", "indicator--4bb1c410-94cd-4ecd-8ec5-ae785df87eb6", "indicator--d8eb59a8-1fe5-452f-9f68-937dc857cc1a", "indicator--acc71924-bd9f-4433-806e-28bfdc615746", "indicator--d6db239b-75a4-4d94-850a-5e24a9ffa2b9", "indicator--4ee1d7ca-32c8-47e3-9c61-e63a5ff96538", "indicator--6afcfc46-239b-4f69-a5f4-2972d4490af4", "indicator--2b998d77-b1ed-4b32-a776-1a8e7f11d52a", "indicator--a2b0543b-4553-4b67-8230-4a7b2c80001b", "indicator--b9c393d4-5e5a-4f58-aac7-7175d47a4a05", "indicator--2450b3d5-52af-46d8-8ea9-7bc8dd059916", "indicator--98fb8458-946f-414f-814d-1f244ca02df7", "indicator--48031706-247b-4144-a4fa-bc9ceaad3007", "indicator--23b45fd3-e889-4213-8215-512132b3e8e1", "indicator--8ef115c7-2610-486a-b1f8-1df7081ef221", "indicator--9e48b675-2a9b-45c2-92d6-d8a57fc00a62", "indicator--41d9d148-84d7-4c91-b7c1-cc3bc7840d04", "indicator--e612f0ac-656d-4694-b9b9-a9f7dddab0a4", "indicator--6793beac-292f-40f3-b9b8-1326f04e1d19", "indicator--3215ab30-3629-4f46-91b4-d74d99a34810", "indicator--159a2d35-7f79-4032-8207-d84a0a2dc466", "indicator--76484cbc-0755-4b23-b012-90df96405242", "indicator--54754e41-bb54-413e-9907-fd7b6bca1346", "indicator--d4424a60-d516-4696-be51-742dffcc8ee4", "indicator--396586e9-c158-4a2f-9135-9eec77a932a4", "indicator--e64e7d2f-ba8d-4ad5-aa1c-b39ff5f1c58a", "indicator--bdbb0a59-f161-4ad5-99d1-e81fbc69adb3", "indicator--6c454dbd-1549-46c6-8c28-37e7b23155d8", "indicator--1b79b939-3063-4ae3-84c6-045349903a6c", "indicator--0a2162ce-ab12-44c8-b722-e80cf0737bb7", "indicator--cb814ae5-d1a6-46eb-857b-8a2600f598bd", "indicator--b6a54169-21c6-4081-a1fa-6bbdef2c16fc", "indicator--8ff5e28e-e2d6-4653-8d75-a817d7fe9981", "indicator--b71b32f1-33e3-4f77-ac11-5217bfe6ba09", "indicator--dda4f5fd-200e-4e94-b6ee-53e35c5bc9df", "indicator--243dbeff-b53e-43dc-950f-e724fc76e0f9", "indicator--ac247572-a79a-4306-8fb9-db5a97935e02", "indicator--e7a1b986-0445-4f75-967e-57a90f66a859", "indicator--49ce6ff6-2168-4cde-bce4-af8c5d3e16cd", "indicator--2c24e076-5748-4770-8655-d20362623ff0", "indicator--f5908d7b-26ad-473f-b629-f2dc5dfc099a", "indicator--5ce029b7-b96c-4488-9d9c-8824f89c6a32", "indicator--f60581e9-833f-4cab-8762-785c2c67d3b1", "indicator--131fb432-0bd2-4a86-a1ab-6fccf8d4f19f", "indicator--eea0cd50-765e-4fc2-8e64-f8247daed1ac", "indicator--ef1dbb5a-9508-4ee6-ac57-6bc4fda0b4a0", "indicator--15122dfe-883f-4808-b838-49b4446015d0", "indicator--981589cb-900e-492b-a15c-e465f033513e", "indicator--301f7994-6fb5-4527-9405-79ba58db8001", "indicator--0c8b4777-6482-4ab1-b878-f13013a5259d", "indicator--49151fe2-16b1-42aa-90c1-4a93dacf80ba", "indicator--b0bb3398-3bdb-4982-94c0-9d7522fce866", "indicator--4dc5a5a5-3972-48be-83f1-c2c7d9d194d4", "indicator--891d85b1-13d5-4b12-a44a-d7333098b795", "indicator--0f5803d7-f047-47fe-a0d7-c63947f1d9ab", "indicator--c1083b34-c26f-489c-bc80-6e5119a1a89a", "indicator--0dcc584f-a86d-49e6-8c04-d66136b6a492", "indicator--daf15cc7-6640-4f54-b1f9-d8cac29da7eb", "indicator--0435c2de-52e3-4f33-90ea-7e902aacfd50", "indicator--793b9cfd-b84a-450a-94f7-a9f4dc1b2a9d", "indicator--ae9cf376-9063-471b-b3a9-31c9ddd99744", "indicator--c6c12adb-1ca8-4b3f-92f6-809a4668fd0d", "indicator--60eddbb6-1426-4b4d-a549-cd9a39d9fc61", "indicator--2a3a6cd3-2700-4115-8170-2e0510bc1475", "indicator--78ae09ce-b1cb-47f7-a4f6-1f9f4b397079", "indicator--7ebef55c-7499-490d-a37d-24f35255c037", "indicator--7ddc3dda-73c2-446b-b1e6-82b78e2ecc90", "indicator--413f5fbd-05fe-4eff-9f5e-94630e10fe99", "indicator--7577bf32-348a-4b51-ae91-f883c043f484", "indicator--15283cd0-3593-4826-a530-a6006342ecaf", "indicator--9aacb883-d6c5-487c-8e4d-47acb19fa0f8", "indicator--956b9c9a-b412-47ad-8496-b8abd59d0996", "indicator--40c5a0c8-e602-4976-b95d-86e8692885ba", "indicator--7ccd296b-2ec5-4768-b65f-45848f32dedc", "indicator--ebc91ca5-4144-472f-b37c-e2e1a4bc05d4", "indicator--ef84424a-efe5-466b-8e4f-01e83be52708", "indicator--2cd53278-0b37-4dbf-a521-381ee893bf47", "indicator--f6f0a18b-ba9a-4521-830e-6f551a4ce544", "indicator--c2b603dc-fad7-4496-940d-d90fc495feab", "indicator--4aec59bd-91df-4ece-8720-c3eb0456105b", "indicator--37c34b11-f3db-408b-bb36-d574c31df4ad", "indicator--7c2f10e5-5def-41ce-a9ff-dff5460bb61d", "indicator--dd8de1f6-c564-41d2-96f1-191f2ca70b04", "indicator--1c0750e9-116e-4a99-bef4-d063c76c84c4", "indicator--93638b9b-addc-44ba-98fc-90474292d1e5", "indicator--592921ad-070f-4fcc-b811-6b0be112b702", "indicator--cb192e43-41b2-45b1-8de8-d228f9bd7d1b", "indicator--c4269c06-0202-4f20-abe0-15e98204c32f", "indicator--226e305b-4432-4636-99bd-a5e125d08138", "indicator--b851ca46-6aaa-4c51-82cc-774a8762face", "indicator--0baf79f5-be68-46ed-94c9-6781016b7ee9", "indicator--fdd1825e-e0fb-48d6-ad39-99fae500beb3", "indicator--64c3599f-ce62-481c-9bf1-c081f2f89640", "indicator--451751d5-e159-404c-b923-0077075daaba", "indicator--537ae903-84f0-48fd-a582-fc7da567af79", "indicator--96b53f2b-f0f3-4ef6-90b9-9ddf92095050", "indicator--0f2dd409-3bdc-4897-84be-8610b10cec8d", "indicator--92667dd0-b367-413d-9909-0c8997472882", "indicator--1895beb3-810f-49ef-a8a9-9ba85496a077", "indicator--696a68c0-88e1-475e-a2e8-d6d86d466023", "indicator--cb83fd4c-626b-48bf-a0c8-02b50fb0584f", "indicator--55a192d9-c906-4db8-ac46-6a5695a9d2d5", "indicator--35ebedd3-076a-4165-ba77-bf5c9f7d730e", "indicator--0a189412-976c-4478-8599-1b4c1513a0f2", "indicator--2a5700a4-5500-410d-8a3a-f5e7e4b6db20", "indicator--849404b8-0995-4196-b7b2-3075269e21e3", "indicator--deb163c5-2faf-45a2-b6b3-b87f13a15b33", "indicator--18a61fbb-0007-4bf4-9ee3-06f5b43fd540", "indicator--3a1ff019-5309-4771-b0c2-87ed7c7077b4", "indicator--843ef37f-94be-4ab4-8497-29110febecc3", "indicator--f41d2638-33f4-42e5-bd80-c9edafa79365", "indicator--bc706336-51b2-4a32-958c-03d6147031f2", "indicator--2d743de6-6fc3-4815-843a-810a77120f97", "indicator--bc23e60b-9d29-4aab-8ed5-6d7cea7a7578", "indicator--9221b9a7-8e36-45b3-b13f-33ebaf78b748", "indicator--c2360eba-7ad9-4933-afbd-00bf7081d0a1", "indicator--8a9d9f52-3689-41a2-9184-83d283c27198", "indicator--5a8af452-cf74-4e16-b87d-eea88ae6b5ae", "indicator--57450c7e-903a-42cb-9932-ddce925e5bad", "indicator--8ef1dabc-4d6b-4b60-a435-ca0c8d2ec97f", "indicator--50bc6d42-912b-4f5f-8a05-e6095cf6046d", "indicator--e1c732f8-031c-43a2-9a51-3b224f8b0a50", "indicator--0fb1e7df-ac3c-41e0-ba82-ef8a033a4203", "indicator--568860d2-e055-4fe7-abee-bebd8ae52e27", "indicator--5b3e1827-eef3-4299-936f-dea3309e7d4a", "indicator--9eb6fa79-3106-4c34-996a-002abc695843", "indicator--c825c266-0f14-4f9a-a567-b33427b0bce0", "indicator--eae79ddd-dda9-4a3c-a11c-6a576810ae34", "indicator--3debc852-f37a-4124-b130-a5bbcfb4d7be", "indicator--a09c0e0d-7773-4056-bb34-4183369ef6df", "indicator--03b90b97-c776-438b-a9cc-04bf9dee884d", "indicator--a23a8f89-99de-4dd3-9076-6274cb0cade6", "indicator--5d37abec-5021-4e26-85c1-db8b66c4f293", "indicator--f3177d98-f3f0-45cf-81d6-932dae2da09b", "indicator--d8882b4f-f5bb-4200-aa6b-c45f508dd3ce", "indicator--3e3c5f11-aa75-461e-86e6-bb33c980fd22", "indicator--86c4dafd-b27a-4f8b-8fd8-7a4902ea7e7d", "indicator--61df291f-c6eb-40e1-95de-f140164c2d6a", "indicator--43d7d22e-b7d0-4dce-8f71-7465a40052d2", "indicator--3c8b69ef-06d8-48cf-aff4-3f34fbfff31e", "indicator--93d1556f-9a87-493a-86cf-b00b547bba17", "indicator--52ad87b8-708a-4be6-ba8b-8f529c6a3a71", "indicator--85ec9ead-c3cd-44ad-902d-cebe9899cab6", "indicator--9b527620-168e-4092-ab69-89e8808a37db", "indicator--4ea429cd-0521-4130-91f1-b7d183df0d9f", "indicator--0e588402-c895-4e3f-a0c1-bfd099e4d3b4", "indicator--c530cda0-df98-426f-9d0f-1a3da2fbc875", "indicator--3cd9fc33-83ed-42b3-9433-e3386d9a93b0", "indicator--1e3b3094-fc1a-4aa6-a0f2-15dd0ac4c529", "indicator--7ba30148-54cc-455f-b599-bec282b7ad1b", "indicator--62f6f837-6855-40e4-b3c2-5532d4b50803", "indicator--c03f9b69-aca4-48ae-8c42-e83880979606", "indicator--3a63a808-b03a-4163-a597-e67e90c62aaf", "indicator--893ece8c-ff2c-4cf9-a756-8a547be3aad8", "indicator--2e0a2fe9-cf7e-4aac-9b7f-1e2d0d2dc784", "indicator--4b386461-a7fe-41a7-8bca-3efef7a6094e", "indicator--07d5e495-e7e3-43ea-aa16-3527f1a65126", "indicator--1f85d926-caca-4741-8e37-205845b292d2", "indicator--c469aa3a-78c8-4ec4-ace9-36b9c67aaf71", "indicator--20b1641a-3d0a-4504-847a-ecb0f9ca4323", "indicator--7774a69f-43ea-48ea-97cd-60e9d1893736", "indicator--8f5bf2c6-5d90-46fc-881f-11c279175244", "indicator--18d41625-77ea-4d9a-ac7f-09e01386f096", "indicator--93435427-30c5-46b2-95ad-50f6e82ff094", "indicator--458f1bde-ed32-4d90-b9d1-0f8c3c53de97", "indicator--c6bed8b2-1354-456b-aaa9-4b7e2efee114", "indicator--eb0518ec-4d7d-4d60-8b51-3f9ca4a12c7e", "indicator--382df629-1c5f-4362-a762-266d7f848321", "indicator--a4685314-6637-43c3-8133-3fb65bc308c4", "indicator--0d77c83f-422a-47c3-a7ca-2f29dbd97235", "indicator--f2207de6-854d-4682-8ab1-c37fd38ba697", "indicator--c1f89aca-6496-438e-bdf7-5ae6816d3c3b", "indicator--dba2bac3-2441-402e-ab33-f0b17a38cc88", "indicator--a3ac9377-9b9a-4540-83c6-7a1762d7ce75", "indicator--81dae09f-4a65-4c1b-b15a-c01b8fde145e", "indicator--eafd643a-204d-405c-9477-b30ee035c45c", "indicator--4c8f53ec-18fc-4325-ba9f-d28d653891fe", "indicator--d23b26a6-950d-4606-a800-c6af731b7b8c", "indicator--8d98428b-23df-42ab-9e7d-9034af4a8c9e", "indicator--786e3343-dae7-460f-961b-4e78fa30367e", "indicator--97079f69-f9e8-4515-ae0b-101a3d680a11", "indicator--e3688c93-8dca-4270-a3ab-8106ff0d3840", "indicator--4a015e32-1000-4df9-b2e6-fe069b9b3c0f", "indicator--e5dfb39c-673c-4f4f-ad7c-749faf6e3418", "indicator--c8c621e3-5463-4ace-ac85-889affee0e70", "indicator--f01341b1-26f1-4986-90be-41fad9054225", "indicator--3d73753b-8f67-4aaa-b30b-ba3281c5f44c", "indicator--c488e5fd-baa1-41d4-827c-8dd317239448", "indicator--0bebedb4-90b5-4d81-bed4-44896eacb057", "indicator--0636d981-57a7-4540-95aa-fd32a8049d44", "indicator--e00ffe59-99c4-4ce9-813e-99429cc616cf", "indicator--63f7f30b-accf-49ad-a16c-676f42333845", "indicator--a32cb7c7-8f0d-48c4-8d24-945cb2ada3e1", "indicator--4d4184da-11b7-4796-8fef-06217b8a2ade", "indicator--6fe0a8c1-8b56-4e75-9bcf-7c11a7ee35dc", "indicator--4252d512-0e7d-4551-901c-49d2687f0e4c", "indicator--b44128a1-ddf7-498f-b527-149f3b2bc61b", "indicator--5e34834b-0761-4166-a5bc-796f5550d85c", "indicator--9da321bd-d0fe-4bc7-8cb3-43618cf965f1", "indicator--dc2b9f7c-d7c5-4b97-9118-54aaecb31b06", "indicator--d82d35ce-5185-424e-b707-45605196ec32", "indicator--440359de-1042-40bd-bf86-e33df7476b0f", "indicator--57b69728-c64f-4bf8-9fe7-0d71807a4a41", "indicator--17675751-8bfa-48f2-93a3-9bc42b001cab", "indicator--c1169e6a-357b-41a2-a904-54e7a264c8f6", "indicator--5d2da656-8ad7-4607-8ae8-9dba2aafce10", "indicator--709e864e-1e89-4ed8-b87e-ae219e3bbf42", "indicator--01c9668f-1185-4465-a6f5-fa540de6bf42", "indicator--a1f99828-b9c4-4ce7-b5e1-4d58d5e5eb60", "indicator--7f10fe8e-434c-489d-97be-9134bd44a41f", "indicator--53139894-af42-4110-a53f-a6e5eec06181", "indicator--cdf7411d-0b68-4789-9905-f001cd26afa4", "indicator--186652da-15f3-4997-8d8c-74549b0e3759", "indicator--1292e3f5-fcc3-45b8-8a28-a9a1170a8a2b", "indicator--2c56b575-c555-45bf-93c8-13b21b3c45a9", "indicator--79fb67f9-a6d6-4048-8907-97a85d7d7dbd", "indicator--d4441a1a-69ac-4071-9ee2-3924dc938e22", "indicator--4aeb9eb4-3446-48e7-9731-eed8e8840bd6", "indicator--bc94de6e-3393-44d5-b3b8-5cc4ac821889", "indicator--eefb194f-cf84-46e8-861a-92b53b1647af", "indicator--f92dfbb1-c53d-4fd6-8df6-f18274871f00", "indicator--6c3b45df-87da-43ac-8875-9f7d8a87eca9", "indicator--2fae93f3-5ece-40fe-a808-1ed509228121", "indicator--4e613307-36b2-4f55-a951-14fbd74f1a90", "indicator--91afba02-fe97-4d36-ac8b-49f7f396ebfe", "indicator--4f864865-dc26-4409-9d2a-47822b66cd67", "indicator--36ba9e9f-a7a1-45ca-b2d2-e2398aa72369", "indicator--434e426e-4385-4d9c-b7c8-4eb41f49cfb9", "indicator--173c4a41-bb7d-4a28-be2a-4f6db30be80d", "indicator--3badca7b-d902-4adc-8442-7cfc1b08aa68", "indicator--92fb193c-0733-41d3-bfaa-d7fbcb63a8d6", "indicator--b965e0bf-3c97-4666-b516-b0628c35e880", "indicator--06a02b2c-a445-452e-8222-cd33942f9ab8", "indicator--69eec8b3-f77a-49e3-9a4c-bf3e9a02ec3e", "indicator--a08fb0e6-1dcb-4915-8ad7-3bbe7a3c7348", "indicator--1ea198c0-f65c-4bdd-8d16-8e41a85a0644", "indicator--acc5377f-ca7b-4e56-a242-6d972e46809c", "indicator--e1541f84-6a71-47f5-bc7d-fe7408082d39", "indicator--24cdc853-6085-46ad-9bd3-a8bd003dd409", "indicator--0eb39605-bde8-40cd-b9c6-cf1d83e28fa9", "indicator--192305aa-b75f-4cef-8fee-6768a6b7eb4c", "indicator--e0612773-4106-4110-8c4b-a9e633ec1811", "indicator--c7f5a11a-a26c-4b90-b918-48ce188ea387", "indicator--746a2c3d-9f74-44ff-912f-620798c85795", "indicator--3f23828e-974d-47a7-8db7-768f7c40ac69", "indicator--ed4b76b7-10fa-45fa-8ce8-4694226b754d", "indicator--4c2f2548-2837-464b-a3aa-325612e62681", "indicator--0a5fccb1-b0a1-4ee9-a5b5-24d1553004a6", "indicator--947f89d8-402e-4f2a-8781-1064a89c6e04", "indicator--2c6ab806-2490-4b34-92b3-c7b3d54d1a14", "indicator--8ced1d9d-9ace-415d-b852-440ac6e314d9", "indicator--7224100c-dd61-4d7e-bfb1-8d47452987fc", "indicator--a2ecc090-e836-4d59-b44b-856fcd4ba899", "indicator--d493c6b3-1c56-4820-a1ba-8adcf8512a50", "indicator--de9d5e6d-bf4a-4d76-aa18-066217993cc2", "indicator--1af0cab9-f7e8-4a05-bd6c-3daa9fbf5f0c", "indicator--aa72a725-be63-4bd9-8909-aad33a25899a", "indicator--c4d97875-cf8a-4af5-b5ee-fbe8642ee56d", "indicator--260cdb65-0f76-445d-9026-e70ee37f7b12", "indicator--b844681f-098a-49ac-a85f-e32a6de42d1b", "indicator--a95cf351-aafe-4fd2-ab2b-6636dcfe2994", "indicator--dca25752-4762-4ca5-b4ad-4663b4595f72", "indicator--7fc87874-add9-41d9-81a8-131ad16baaf6", "indicator--beab2132-a047-4042-9a77-8b7b7f1f0eb0", "indicator--f511fb47-7157-4a6b-8bec-6d2b3f78ac1b", "indicator--4f8fe6a0-c2f4-4e25-86e1-667a14910c93", "indicator--aa93ab55-9538-4352-b9cd-8c4e891bbc9b", "indicator--87dbf05e-a327-4999-8792-dea91b11c821", "indicator--903bc7ee-ce8f-4155-bdd3-3c13d840747a", "indicator--c06e113a-441f-4e58-a887-6ae80a4194f1", "indicator--52f5f0ae-760d-4db7-a086-e6eeab997fa8", "indicator--8fec0ca4-9a85-4f69-a256-9e094f5aa2b7", "indicator--d28315c7-d693-46ab-83f2-7497385fd6bd", "indicator--b6d213aa-3376-41ff-9ec4-19f9b39519ad", "indicator--dfe14372-f6fc-4184-8c2a-9889ba0517f6", "indicator--f859fc4a-7978-45d2-9649-46c4e297675b", "indicator--05b8755d-bc29-49ab-b0a4-b308d2353298", "indicator--e36f48a2-7889-4f78-9243-3e7800f0aa87", "indicator--71429cc5-f62a-4f64-83ae-f26002ef4d09", "indicator--f0094f73-7df3-4664-8477-0439a6ddffc6", "indicator--e0c5c29a-8f56-48b3-8101-547f04610ab8", "indicator--50ea7c4f-4f7e-4d13-a113-5c36a262d1d0", "indicator--649d027e-cd69-40cd-81d9-e7f8a752c887", "indicator--10719681-fe30-4b77-9c23-978055072a54", "indicator--e2e9e656-b5c8-4cbb-8d5b-b1206d820c1b", "indicator--3bb7850f-bc32-46ae-a4de-8a9080114718", "indicator--5f8cd894-439e-4eed-8e2f-2eab99f440f5", "indicator--ee7976da-b851-482b-998e-07008c9dc707", "indicator--97595ebe-488e-43c1-974b-0f69d55e68bb", "indicator--e80785c0-3577-4b08-bd58-655ae8137ebb", "indicator--edf5ef23-74a8-41de-a557-001ec383387f", "indicator--5fb8cac1-b6ab-40e8-a6f7-e0a7e7cefa79", "indicator--7563cc8b-f734-4253-a2b0-d91fa9808596", "indicator--eb076b2b-f368-4f0e-9e81-33e8a9e8f782", "indicator--deb6728a-8d52-418b-b47b-04102d72f658", "indicator--c73bf4e7-2f1d-495d-b177-1690825a0f47", "indicator--0c89d204-9d4c-4ff9-a63b-a30f6a36a7f9", "indicator--5ba9c684-74ba-420b-aef2-bd92ace9ec6d", "indicator--53671ad5-8fea-4b9a-aed8-e025db57c992", "indicator--bdeab2d2-24c5-4067-8587-828b8283d3df", "indicator--e07ff9af-d6c2-4fe7-badd-a9bd83ad7b33", "indicator--9b15b629-5546-4c45-9e25-41e65716807d", "indicator--b2ad398c-7707-456b-980b-ad395d4ca874", "indicator--09609a20-c02f-4e7f-8973-5b6818694961", "indicator--091ee44b-f7d2-464c-a19a-d2d966fc4b4a", "indicator--afddaa59-e6df-43b4-84d1-967da6a05c55", "indicator--a5013ed6-f9ed-4212-8616-3f4b4ff05e06", "indicator--c7cfc5f8-9226-4e8c-8b68-3e065e05d1b1", "indicator--d9a41457-feae-42e8-bc9d-27859613e8d4", "indicator--571e7145-c566-4ce7-accc-f912258c82b3", "indicator--cb1d7edf-b695-4832-a84b-93ffe4156359", "indicator--16713d3c-7f8c-41f6-b1bc-4105440dac62", "indicator--978b7c61-b034-4b08-ab54-f887dc919cc9", "indicator--22d8edf4-adab-4930-ad72-08bb758fbe34", "indicator--50a99981-fdac-4000-844a-30a1817a6ecf", "indicator--db4cb4a1-de17-409b-803f-0f51eb2c0295", "indicator--494c5988-7911-4167-b3fd-62fd4235e780", "indicator--cdbeafd4-f162-4bd3-9f7a-29dfa8228a28", "indicator--79e95fa2-52ce-46e3-af73-2286a03314b1", "indicator--032aa659-5749-4062-af54-7a1786e5ccce", "indicator--4a1b862e-8a41-48ea-a44c-192c71e5f0f2", "indicator--a2a1f1e9-693b-4bd8-be16-19291ac89114", "indicator--1acb5a5c-50ed-4e78-8c1a-a13853c43bbd", "indicator--6e4fc951-1594-45a7-9524-c91560cbe634", "indicator--7ed4f800-43bf-424f-a28b-dc9935f9fbc4", "indicator--ae8a3e5a-dc09-461c-b4d7-d893e7c88ca0", "indicator--92edd6b2-7ca7-42d4-a108-61303ff26caf", "indicator--9e0348a8-c6a0-4133-8854-c43bad029dcf", "indicator--3d481459-96b9-4cb7-8cca-12b07683e096", "indicator--947a83b1-43ad-41f6-adac-3aa3195d9325", "indicator--982df406-660e-4dbf-a680-6b42b65dcf2d", "indicator--a61edc36-3b8b-4816-93ab-93f2f99eae7e", "indicator--c5c52941-f400-4b2c-901a-7974984c9990", "indicator--e98259c1-cdec-43e4-bf21-d37e27996124", "indicator--2d2d3f85-9846-4332-91c9-d8f40e9575db", "indicator--9cfe5142-6054-4591-848d-e5c494837aae", "indicator--65eadb30-d77f-4076-a27a-2457e635a128", "indicator--0c8129ad-0264-47db-963b-369f0f745b6f", "indicator--fb8598d6-c249-4414-ac36-ccd15143f701", "indicator--ad9b628e-546d-4fee-88c8-936b133a9984", "indicator--1ebfda4c-2bb9-47c2-8a6d-a246704c9076", "indicator--31e1258d-bc3e-4b6c-a1a1-3e6d2052ffcf", "indicator--bdaeed36-d92d-439d-93e9-f832eee5d2e8", "indicator--9494e6f1-fa76-44cf-a70c-8ff38e7e91a2", "indicator--5502c1d8-b0d6-4081-aab0-63f6b4413eec", "indicator--cc4cab59-5445-434e-aca7-361dc5f0ce85", "indicator--7bee1bdc-d695-40c5-bf62-242661e52b28", "indicator--672ac6c0-4f82-4ffb-a5eb-afbf4988b472", "indicator--60e20f87-d399-4133-b759-3c8f05016f85", "indicator--a879d24e-7934-4431-9107-c84f0ff91a78", "indicator--5b35d10f-9dea-4101-9cd7-ce60c84feb07", "indicator--b466b4cc-0303-49bd-a4b8-36ac0f50f3d1", "indicator--0b14bcce-0964-4158-9d79-90ce5d36b328", "indicator--00f747d6-f151-4a5a-9bb6-f01581f97efd", "indicator--34a6455e-6a9b-47a4-bdc3-3760a4d14aa1", "indicator--36ba9c79-6142-4309-b799-3903a461ff2b", "indicator--60414872-402d-4a15-9d3b-797827733ba7", "indicator--2a9b3118-1a55-4b6e-bea6-f5da699b1073", "indicator--dd1f3fc1-7e8e-441a-a0df-11b2c23ec60e", "indicator--c898e3b1-42e9-4573-95f8-182fd06e7e91", "indicator--d1c945f0-e22e-415b-ac53-4a5dede134e0", "indicator--3f2d0617-518a-4eca-876f-a381646f8f05", "indicator--312bff12-ceba-4d2a-93d5-f98e7771cb8a", "indicator--bdf6fbbf-b688-4f25-843c-6834c7db8cce", "indicator--a2967aae-0384-415c-80dc-f3b9170e23d8", "indicator--ec877840-809f-4331-9784-852c5a34d015", "indicator--71349cec-e613-4e67-9e30-0f4372408388", "indicator--b60161b2-551e-46e6-a880-fe0d7a177f29", "indicator--6b386f61-50b0-453a-b323-647e2d7c8d26", "indicator--d064b467-f5a1-47ee-89f6-2fc46b57538b", "indicator--63b6c625-6ac5-4f7b-8825-01d5cc006896", "indicator--0143ff7e-2e57-4422-864c-3a9e3a6e208b", "indicator--ef848ec7-aff9-4d68-a597-bb5f88d11c36", "indicator--0d47c3d1-6702-4029-b333-312233c691d3", "indicator--3c902386-aae3-460c-ada2-7e00c3a9c93a", "indicator--9de9d94f-9529-4fdd-b67d-2fdd39f4ada9", "indicator--4b8315bc-8ee9-463a-934d-15afef80b904", "indicator--c5c74882-620a-4af5-baba-22eab54937a5", "indicator--57bb95d9-8a4b-4fe3-9254-7f6825efc5c6", "indicator--350c20a5-6ebc-4ef5-9d53-f0f975fc7d4a", "indicator--8af20ec1-d9ee-4ffb-a3d8-ec23b647af3a", "indicator--6f8587be-001b-493a-898c-dcf6c436924b", "indicator--364ea7ea-6b25-4a64-8f25-f7b6c7d358f3", "indicator--d0fa592b-642a-4abe-94b1-3575fdd1e301", "indicator--ea0f8cf9-1fef-4a94-8287-6054844ce2b3", "indicator--e8bd95a5-fe2c-4ab0-80ae-262cc84c39c6", "indicator--a26c0932-d511-4c48-a0a0-2a7c053c02b7", "indicator--89967c27-54ac-4dd3-b629-3171b5889ddb", "indicator--552c0241-fb26-4229-8447-e889589f120e", "indicator--d1289e81-0ff8-4790-badf-888694034b33", "indicator--5cea4a61-838f-4f5f-9821-720d2f0080aa", "indicator--ac9b4c84-7300-4637-9f7f-c6cd5375b8d4", "indicator--5f7e7eae-30ba-41ba-8226-836d91956f85", "indicator--3a035e31-d5af-48d5-a82a-4ef6e0462198", "indicator--ea1d3f53-cdfd-47d4-a706-f8c03808493b", "indicator--9bdc0c80-08de-4f1b-96ff-dd6fa670e276", "indicator--c92ca69c-e2f3-4642-8260-ac81ca529feb", "indicator--eef0c67a-8874-4396-9753-08f39ec72374", "indicator--adccfa53-42c4-485c-82f4-e8f2252d4781", "indicator--4f0fdde0-0ac7-4810-8ebc-e5e2b5034ffa", "indicator--95667ee3-6a4e-429a-9d39-8e97321ed559", "indicator--ff4e4332-1798-49f6-9bad-0ca8c206c06b", "indicator--8255078f-f61d-4793-8a7d-d5f34f4ccd3d", "indicator--14f8d43f-b844-4d18-85ee-026aaa27eb92", "indicator--696d1f10-dd22-444b-95c3-e109aa975e75", "indicator--69791a3a-ed0d-4db0-aeb1-6ac802fa6b53", "indicator--74bff9e3-43fe-476c-a61f-7ed19de2deab", "indicator--8dd2332a-e811-443f-a155-a137992175ca", "indicator--a93943b2-273e-460d-829f-913b0894764d", "indicator--5f00c817-c49f-43fa-b702-eb59b9036399", "indicator--eae979f2-fb5e-40f3-9b38-25e5379ffdfd", "indicator--3513e10f-73f8-4aea-b0ee-36f9018d1625", "indicator--40ff20b7-a0df-465f-b0e9-946fa193a706", "indicator--38706f14-6289-4f06-b25d-9d848d13e385", "indicator--1589769b-f2c6-4c38-8173-61bd0258aa26", "indicator--e079ba26-4050-4a49-aba7-13a1da6dc91b", "indicator--400bf627-9e34-40de-b8fd-d3ae723cf89d", "indicator--573f6cb2-27d0-4b35-b68a-4ef8a62acf33", "indicator--195ce24b-775d-49fe-acf1-93b4929694d2", "indicator--c4c25314-efc6-4d55-98ab-7f7c304f67c4", "indicator--3435acbe-18d8-476c-b3ba-5c945c862e2c", "indicator--75305580-9d42-4647-bca0-07570d71b847", "indicator--ca4261fa-bdb6-46ed-a45f-741cf2342ef9", "indicator--d7d87a16-2a71-424e-854a-e94ce1d85d26", "indicator--bd848ed5-1809-4980-911d-f4b0b038a86c", "indicator--3d99b2b1-5b88-4608-b111-e9a892193f9b", "indicator--72d48a15-d677-48e4-b81f-5babf55a8033", "indicator--0efa55cb-735f-447e-921a-e436ba335067", "indicator--d21569a4-ca88-471d-8155-d9f1e2007bca", "indicator--7d82a89c-0de5-4908-af57-9acb5770c176", "indicator--f47a77c5-2618-4f22-be5a-243b60ebf1c4", "indicator--4b1d204c-1c02-404e-a41b-bf7dd6113468", "indicator--bba4c8c1-4a32-4195-aafb-3ec99ea9b1cd", "indicator--6312d89e-83cb-4422-8a08-f3daf9be21b4", "indicator--a71cca69-18bb-4eb4-98a8-5d1399a2baea", "indicator--dd387123-08ed-46d1-8400-4899c732ebd7", "indicator--4987a1ff-b490-4c12-8534-5d6be07ef1b8", "indicator--9efce6cd-280f-4c22-b072-c46efd687116", "indicator--33dfbbab-3c63-4a56-97bf-23f1ab6b7d80", "indicator--9cd6a960-95e1-4dbe-b3f8-0d5d43e21add", "indicator--45066fc1-0e5a-480c-bcdc-2fad50020606", "indicator--4228820e-bfef-4092-bb22-6b9b79a0830c", "indicator--877df2ef-fe6c-41bb-946a-5b2468472ed7", "indicator--990243ed-3dbc-410b-89d8-6fbd96955946", "indicator--30ef5684-9fb3-424e-bd52-2db16f60d125", "indicator--924d1bc2-ac87-420c-897a-64628e33972c", "indicator--f92dcd53-d0c8-487b-acef-887d533dc199", "indicator--c2c9758b-e084-4afc-a3f9-48072e3e3aae", "indicator--bc73e972-c619-474a-8403-c06be486e1de", "indicator--7ce3e3dd-11c1-4ffa-959e-064a31271cd7", "indicator--fe9ef3c5-19e3-479c-ba15-38d2ac04bbf6", "indicator--7726586b-7d38-471d-bc83-813334929d59", "indicator--934d37fb-39c4-4127-8ddb-16ca7107b906", "indicator--3e2b30ff-c635-47ba-a3b2-3faeb8ee010e", "indicator--acf0b742-6872-4fc1-aeac-d382b9eeb65d", "indicator--4f46af4f-70ac-442a-b60b-ef4662fa1785", "indicator--a5c32f3d-2966-4991-95f7-07732360edc8", "indicator--930518e6-62fd-4ffc-95cd-5d4259aba08f", "indicator--77e9c8db-2cc7-4d8a-a3a6-2e3ea2d046e1", "indicator--89f32c9a-85d6-49d6-a9e5-82d62b20c3df", "sighting--4ef05739-9865-4bf3-a094-850e97b32ea8", "sighting--516f0f1a-c9a4-4189-862a-9efbfd80b3aa", "sighting--bd9152ba-6f6c-41b6-8c7b-06a3564629fc", "sighting--524b7f7e-448d-47fa-8caf-867c92626d4e", "sighting--91f6b2e4-9b02-4f3e-a675-019a82454419", "sighting--35d3a2cb-eca2-4dfd-b3ea-78d50cdc2bce", "sighting--6ab2f2aa-65db-44e9-aae5-06e802d34539", "sighting--8f1f91b8-ea40-4244-86fe-d833dfeddcba", "sighting--026ea556-c9c1-477e-8863-af8bd4366fd6", "sighting--c9220d11-fc32-4354-8f14-8a0bba478d52", "sighting--d2675f57-1abb-463e-ac13-6b016d12a7fe", "sighting--2cc6b455-7b41-48f4-8105-89346877c6f9", "sighting--fe9f1303-83e4-4fe6-a4ad-289e8f244316", "sighting--b984babd-6f10-41a2-910f-6ab89d5981a5", "sighting--58ea2ef5-0db4-47fc-ba84-f31188540df3", "sighting--bcb26dce-0497-40bd-a1cd-8f1661d9cadb", "sighting--8c8562db-b80c-4523-b7da-4dd47d45d1c6", "sighting--43cf3ba1-e434-4a96-a6f5-6d611815963c", "sighting--0e57c0ed-79e1-404c-be05-aa386c5939e1", "sighting--6596c528-daec-47dd-98cd-b37fbb4928b9", "sighting--354fd553-865c-4e55-9c25-f5eb6a31f723", "sighting--5672b854-9c1c-4ba7-9b86-342a32cbe3ce", "sighting--b10e6779-8d30-427f-8ec0-9fb63ed05445", "sighting--d1ff8a2c-b735-43ce-bddc-efe418f34487", "sighting--1bacda7b-3175-438d-a497-760d00b29f2e", "sighting--34e0e1a7-dbbd-4c0e-9bad-06d0e4949b47", "sighting--a3db0e1b-5fb3-4c3a-a256-fa109284816c", "sighting--40c11172-717d-4824-8463-2c8c67f74a90", "sighting--284ee5d9-b26f-4353-acbe-9d8ed2cb6aaf", "sighting--9ab419fb-0def-4834-bd3a-692206bf3241", "sighting--3b9c14a4-fac3-40f8-ad69-a319c89c8cb2", "sighting--b4deb71a-6233-44af-98c7-86d68de97407", "sighting--02bc9e9b-2d25-45b7-a1ab-58a5c1e3768f", "sighting--10015558-b65f-496a-b5e7-6523ceb08a0f", "sighting--bd69b313-e0d1-499c-8d21-45766607d0bd", "sighting--30d00b3a-924a-443d-9bee-9385e0c048d5", "sighting--228e6899-d019-4a1c-9712-c30d8ac4f888", "sighting--b407b6d2-e32e-4ff9-9f17-c9fa87124ee0", "sighting--42c4a0d5-7fec-4dd2-9f4e-45b20b0786e3", "sighting--7ce627e6-7de2-4f4c-bbf6-dfe4112c0963", "sighting--3a431f46-8b71-4171-a869-d10e3f290610", "sighting--53d879d7-5bb8-4c1d-ba35-b3491e4137cf", "sighting--92570c2f-baf6-46b4-b551-a8a03b52e1b1", "sighting--c9f7c408-ee34-4eb6-84b6-0140d2c768e1", "sighting--004a66cb-a29e-41ed-b696-886715e237c7", "sighting--d7b0d7df-e810-4d84-bcea-06c55e0dce98", "sighting--35b75c1e-5b39-4eca-beff-d28c277bbbe9", "sighting--ca8e2db3-3926-4228-9cfa-5770748f2346", "sighting--a41491e6-d0e6-49df-a07c-5468824de62c", "sighting--acb86b65-7a7a-426e-a5b0-e4062e733822", "sighting--a19c8b0a-2d52-4e3a-9532-cf247915ed02", "sighting--16cea6c7-0217-4d54-baba-465301ff01fb", "sighting--fb49469e-8c0e-4743-b7e6-8d9310c55f4a", "sighting--a9290e07-ce4f-4d56-a35d-b2ac5cecd19d", "sighting--40b87094-1f7f-4c8f-92ba-4c40057bb3d8", "sighting--8ba19cd5-d5cd-489e-a951-94bb0decfbb1", "sighting--c010520c-8413-4401-93b2-bf97237e9c01", "sighting--ea58d16e-88a8-4ac4-9828-8b9631641007", "sighting--6abd171c-9180-4388-a53f-2aa70d0c597f", "sighting--4127aebd-e48f-42b3-a847-45e46f43756b", "sighting--1040357c-ed29-4e96-97d4-6a5df588cc50", "sighting--467d85eb-3ab7-4f99-85ee-f075a706fc78", "sighting--4631486d-9d00-4c6c-8d9b-71eb5e1957d3", "sighting--0566023c-4d03-4b7c-af75-b7736f852ddf", "sighting--dda2952e-3f58-4e9c-8467-1610a5471c8a", "sighting--a3064bf2-0630-45cd-b117-12dd613e3045", "sighting--fa06a1cf-82f9-4b6a-8cf2-20584fad1ef9", "sighting--f31fdaab-dc6c-4265-803e-f6e22fa65939", "sighting--659b3e95-a012-4db6-a23f-336709120e40", "sighting--bf023a40-6201-4a6f-9305-a51c3734f115", "sighting--c0caff98-628b-40e7-a4ed-66b65c42e28c", "sighting--4f27ff58-04d1-49f8-be41-87d2322a6b7a", "sighting--697fdba2-b2c0-44e7-99fa-63d91394f3e3", "sighting--6626406a-021d-4054-bcd4-3cac97b2d5f7", "sighting--a0ae2f0a-2991-40a1-aeb3-099616792ad9", "sighting--17a4d4b5-ac10-4e1e-9eae-632e932007b0", "sighting--6f2117ab-2796-4521-8383-4fce6d82f07c", "sighting--fe9c0ace-c9a8-49c9-a37f-8f684c62bf13", "sighting--79f3467d-3744-4eec-988e-8a597ad34427", "sighting--237e20d6-4714-4850-a4b9-4628824c8b80", "sighting--523131e6-fba5-4225-8295-731acf8cc47b", "sighting--5650204a-5e8d-4a10-bbb9-efd6093d4ed7", "sighting--8a4ebb50-9a42-416b-8218-a33774db5cf6", "sighting--5956eb97-768b-4960-b3ec-31a743c74517", "sighting--4fb30aec-2e16-4370-bc9c-e9413aee863c", "sighting--08798b87-2205-4d86-a346-1e32228336ee", "sighting--928e2b27-7cfb-4a84-b2bd-b890207e3b4e", "sighting--cd5fb2dc-4e4b-4990-8858-e0c43b95d73c", "sighting--1172ca15-626e-46e5-a13b-b61623a169af", "sighting--f5ba3675-688a-499e-85bf-9cbc679e8119", "sighting--92d991b5-e567-4108-8881-4b532eca64bc", "sighting--36fb6242-f26e-4e24-8f17-2603fbe1518e", "sighting--1fded09a-bd65-46f5-aa02-d63c4594f931", "sighting--349ada01-1d01-4d7f-b86e-d897b706cab5", "sighting--e5fcc782-70c7-4a72-8c64-0e23be5ea993", "sighting--c95b65c8-213c-4e8e-a976-40503d452625", "sighting--9f82dcd1-c202-43c3-a54c-de288da1de33", "sighting--9d4588a0-5bfb-49fa-882b-9a97c4cb124a", "sighting--bd500709-7d96-4381-9531-bb5a0914319d", "sighting--dd0c398b-396e-4024-a02c-99cfeaae1044", "sighting--c3ed69ad-5e06-45ae-a321-dac9d9082c45", "sighting--4f7ac575-3515-4255-96ba-17e2bbfcc057", "sighting--451978b3-c01b-47f2-b1ce-effd926483f8", "sighting--6b8f56da-5bc2-4a55-bb45-5c31a61e0f49", "sighting--19a23d09-cf42-4513-a118-e923b519b682", "sighting--31eb2ed2-8d12-440b-8b65-4e06d10909ed", "sighting--94853906-c0d1-4bd2-b8d8-f8ffdadf143f", "sighting--a4445e8a-c9f7-467b-9a6a-1cbc4bb27968", "sighting--731698dc-5a48-486c-815b-a82f20faff2d", "sighting--1c478e9c-c697-4637-8b1b-9e1e5b762267", "sighting--753bf347-7144-4334-a7ea-9b3d422324e4", "sighting--920db13b-80f8-4452-8f3d-907e039906d6", "sighting--05634490-18ab-4cfe-9604-fa8c7cf7b019", "sighting--34f2204f-5881-4d00-ac1e-1f3d806feb86", "sighting--59a5964b-26cf-448c-a929-dcb1e40383b7", "sighting--ec007c80-8826-43c8-941c-16db5c1173c4", "sighting--b202f15d-f7ca-4206-aee9-b90189eee940", "sighting--22748e3c-5247-4b73-a1c2-5d019aaac349", "sighting--d4648185-8eab-434b-843f-4cf241243873", "sighting--e3f82b52-09a6-450d-bd13-b91d5fcd3cf8", "sighting--e1fc51fd-85d5-4065-9c04-d69f6ee3126b", "sighting--85fb8aba-cbea-46ad-be0d-72e85f3463d0", "sighting--92a4a6bf-3c26-42dc-9384-52af80657d18", "sighting--57bcc69d-6d29-4a7b-b93d-db7f9d27703c", "sighting--e09477e3-9048-4731-bd8d-b6cad71adfbf", "sighting--79512d7d-61d1-4d14-85ab-01b44113a017", "sighting--805ba0d9-3fbe-4256-b256-21630a3e071a", "sighting--cabb0ed0-05f2-43c9-812c-6fb7de3ad554", "sighting--1a63312c-0365-4237-b343-b5456ac50225", "sighting--7f276185-3690-4efb-8a7b-bbbd8ea04b06", "sighting--89f54632-f294-4e1b-8cfc-1c6ccc78087a", "sighting--a2c1fe61-4970-40f3-9878-205b179de0bb", "sighting--944ad1e6-1cf6-41be-b7d2-2edd915a97d2", "sighting--b76810d6-d67c-434f-8689-bc1d595d6800", "sighting--48326fca-f41d-486d-ad76-de33186302ac", "sighting--ef9bf6f6-0a8b-4964-b1be-ae474ecab446", "sighting--4199697b-d0cc-4889-a235-d3ba8941a246", "sighting--91db0954-35e6-41d5-9bd3-4c2f42abe703", "sighting--0e989ccd-2b0c-41e4-9d48-a94039a681d1", "sighting--470d4f17-2fcc-4bd9-83c7-a16526e35341", "sighting--d7dbd3d0-8f72-4875-b30c-afa15ce7d4fb", "sighting--4a69d69c-109e-4042-8637-60146d4dce0f", "sighting--18c93b6f-f35f-492b-8234-237b14655912", "sighting--f854248d-243d-4f0c-8b22-53834cffa326", "sighting--1eb96c9b-3faf-4196-baad-af6c6bf0ecd8", "sighting--3b78b1c7-86cc-4879-a0b6-f90debd54646", "sighting--0f2fb2de-4cdc-496f-b874-bee0757a18d7", "sighting--d8eb47b5-2e66-4284-a07f-e37fecf56912", "sighting--560ec658-54a7-4d88-a571-4da503cfa7db", "sighting--4a2404d2-7b54-4fb4-b43b-d994e90d2497", "sighting--c979f414-256c-44b7-91d3-7bdc1684a188", "sighting--91c8c62b-caca-4980-8832-e58f62169f31", "sighting--5e9478f7-1f74-4562-8226-7c3be9f58e12", "sighting--6c3c8858-b979-46af-b982-adda7da54d6c", "sighting--11d81087-3574-4918-acab-307acdf683d4", "sighting--28fc0c4f-f74f-433a-a8d0-4f03a14f6f62", "sighting--2e9d1c75-87df-483c-a0cd-0510200708c7", "sighting--f5c07ec3-6811-457c-b804-0c991499eed2", "sighting--47a232f9-2b34-49dd-926d-434fe58dc365", "sighting--3832a052-9798-4fbc-bf8f-c5befe47ba2d", "sighting--5943b491-6a59-4b2c-a364-eacd974bc76b", "sighting--2963ce75-f2a4-4399-8139-380181654ff9", "sighting--3ece1dcf-bc38-4bad-bc80-e14274261238", "sighting--19bbe832-5d47-4c7d-b63b-bb898a39501d", "sighting--9b160aba-d5e6-4475-a9cc-64322edabec8", "sighting--5d32a150-5bc7-4a7e-a78b-1d77e0afbb99", "sighting--cc9c778c-30ab-4735-b997-8c55b05c6d9f", "sighting--48d922e4-a7d9-49bb-97b6-d99f9df7db80", "sighting--81fa53e6-a680-44e4-bff8-cc13b697767c", "sighting--750ee5e7-c342-462b-ac0b-cd94db687d11", "sighting--a7ab0724-30d9-45d0-88b5-6238243eff92", "sighting--a5036366-68b2-4863-968c-35cdae0029bf", "sighting--f633253c-1646-4097-aa04-56af7cb30b7f", "sighting--018aadd9-9e07-47c0-bfe6-4ac1352c4cce", "sighting--0305a500-8926-49ce-9a25-49747a17a496", "sighting--15be3224-d095-40f0-bf1f-e13a6e87baf7", "sighting--3c5654e4-c87a-4171-99dd-ccb0b825833c", "sighting--a294687f-5b1a-42da-8612-f5c67d97f144", "sighting--c33c4f51-c622-4f4a-9db0-56a191563bf8", "sighting--b0d73025-4447-4e80-b134-9228b3427fe6", "sighting--bd675856-b45a-4aed-9de6-2ec17dae4033", "sighting--9d1f4be9-373d-4a21-ba88-4f017c0b8026", "sighting--6ea1015b-3ee7-4497-a7c4-1194348d27a4", "sighting--d6aaaa1d-12ad-4d40-bb4b-fd721dbfe289", "sighting--a0fb2a61-8321-417e-8a99-a7ded5926a37", "sighting--085a8bad-7c58-44b3-ba88-f5f60392276b", "sighting--caa3e97b-0842-4e60-a2b7-bc9afc1652e1", "sighting--0bdfea50-33d1-4d2a-8dfc-cdf15122c979", "sighting--a776ea3c-a738-4664-8474-74351144012e", "sighting--5b8d6b8c-6cac-40d8-9d6a-29236efa1d13", "sighting--f042ecf6-0a90-4b16-a0cc-57c7ac66ccac", "sighting--1288737e-06fb-4b1d-9f73-669ab7190984", "sighting--8b401f53-d996-4f03-9134-69282bceced5", "sighting--b1b9c6de-2235-4d9b-881c-0afe7188ce43", "sighting--b2e56590-8560-449b-a683-39d87a4cc648", "sighting--c5e04588-975b-4ae9-a7f6-0ebfc5897a7f", "sighting--bb3e7086-0701-4f7f-9f07-eddebee82e3b", "sighting--56905f1c-6913-4cb3-96f6-4ee61fc8e4b0", "sighting--b97e236c-e5fc-4e64-8fea-10664ac682b9", "sighting--d96b7505-9a38-49b0-be1a-9a453141ffc9", "sighting--7015d381-f22e-400a-a7a4-b296174dca55", "sighting--e100b161-db88-4aac-b500-96a5b8ce0644", "sighting--ae0fd964-f818-4d29-b5e3-eec7011d9c1f", "sighting--b25194b6-2a2c-420b-b11f-c45d102255e0", "sighting--3cc2892b-b450-40a2-8ced-85ff787dc767", "sighting--ab038c83-de9b-449c-a12f-74761d167020", "sighting--4797d314-94ad-408a-8321-1b614da72d26", "sighting--6a874965-0edb-4b84-bc8b-a83dfda57e3a", "sighting--882fd65a-03fc-4b6c-ba30-0b18fa91c695", "sighting--01e0d487-b7e2-4546-a57a-deb0a2fb35f8", "sighting--d1460aba-6183-47ad-9d32-4c812600d902", "sighting--5cf6d7c3-efa3-4bbe-bedf-82976bc3ce5d", "sighting--6ac642f4-df22-4fb7-be6e-458f5ed92f0a", "sighting--9acb39cd-e499-4738-a80c-a9b6b64d23cb", "sighting--99a68fbe-bdb0-4358-8e38-c25a364cf90f", "sighting--932e808e-b6a0-4028-bf34-f65bed11e430", "sighting--40951b78-0533-48f7-a917-e8bd2bfd1b9c", "sighting--d1bdf283-0996-473b-97d1-9865e0f3a3f8", "sighting--2f34842e-1280-4d43-8168-b7d4f44c8c04", "sighting--23609764-9c17-4bfb-a307-94fa54f13c74", "sighting--b960a973-f938-4cf0-9706-40b326d07e35", "sighting--e7be1ed6-2cd7-4362-bdfb-a61a1fadfcd2", "sighting--bbd47d53-52e3-496c-a28d-e07b991ae802", "sighting--de6252f6-513e-4275-8106-304e3762d7c8", "sighting--6dfb9e3d-670b-43da-ae10-b3c2609adbfa", "sighting--61565692-becc-4bc5-952d-e8ff63529737", "sighting--c5b5c152-f09a-4da7-ac0a-6570b5114fd1", "sighting--6eaaf844-4be1-4633-ab95-3989e02460d6", "sighting--061eaf5e-55fc-4473-9ce0-f80ea8301397", "sighting--4008aa35-2fbb-4cad-aadc-620fc1dd7b82", "sighting--30dab582-1582-42bd-9948-330bb6007b47", "sighting--31b7bd54-8e1c-4383-acc7-c0fe5a043b1e", "sighting--ec0b5881-efbe-4219-bd68-f6c50217c7f0", "sighting--3e903736-4fa0-46f5-876f-4f4972103f5a", "sighting--2bbfc356-0ea8-4298-beed-6101bbd88825", "sighting--bf547301-3c8a-4520-b7d4-20de8329d854", "sighting--b3a4685c-c082-4e5a-a1dc-9736f2cbfba2", "sighting--ab5564f0-1b64-4152-9b3e-99112d6f3a18", "sighting--4d9ce3cc-97a1-4af7-b353-578cb1a4ea6f", "sighting--c62e82a7-82e3-4f2f-8ed5-045ffa6a3e71", "sighting--09befdfe-8223-4cdb-a3aa-e53673bbfab0", "sighting--185061c7-3dec-4cd4-92ed-737050d60970", "sighting--092b9410-f6f7-4a84-a280-a7b2bddc2216", "sighting--3c241ee1-7b91-4424-800b-14f4b55abd4d", "sighting--c30e3141-f780-4830-aac5-a1748218a824", "sighting--dc42418a-ae1e-444c-9d6a-8acc0c1b7ff0", "sighting--98ecbfdc-91c4-4d54-bc34-22a021018c51", "sighting--50bb94b9-237f-4ee8-a864-9e7078abfb9a", "sighting--429a05d7-0fde-4535-a0f4-89267db2743b", "sighting--e4df55a2-6f75-441c-8278-97b8c88ad6c0", "sighting--ee6d257f-37e5-408f-a178-de1a2e3eb70e", "sighting--6c82ae5e-8bfd-465b-b71b-0f32f8c6550b", "sighting--9976a6de-6cf4-4e66-b03e-0ca0442376e4", "sighting--cd3fac25-d6fa-4493-9794-5e850231d934", "sighting--2a339598-ee7b-47aa-a676-48a39236185e", "sighting--b2798800-f78c-49da-b96d-fc5901353f25", "sighting--a3976756-ab32-419e-8613-1f309f3d4b18", "sighting--b6961b16-6d0f-4f39-aa1b-dfe4d70e2115", "sighting--ef42a0aa-8c02-4d95-a20f-f1bd0b756132", "sighting--b323d548-bbe3-445d-95d5-b39eccebc9d4", "sighting--1b64b0ff-3235-41fe-8b82-a70b0093fad6", "sighting--d2b938dc-f734-4a85-b59e-811dea74da3a", "sighting--6ebce8c2-3b75-4a92-8b0c-0182daede05b", "sighting--6b5865e5-f7ce-4070-a4b4-83ce797d32cc", "sighting--efc24e57-3a61-4ad9-9797-f5adfc2f8073", "sighting--44a43ae6-ec28-4d35-93c5-9706b4bc50a4", "sighting--0087d2fb-0a41-4ce6-bec6-5d215f1170d5", "sighting--f6bbd939-0296-47eb-9298-4c4572c8ea49", "sighting--76cd2c2d-5839-4e2e-816b-5cd36fc0b344", "sighting--86fd8430-5534-4d92-b190-27494e9af7a7", "sighting--b7176e01-931f-4e9f-9c0d-29a6fd877e0b", "sighting--39c2de00-d756-43f4-a71e-c28e8571c415", "sighting--a8951811-3283-41f1-9f11-5ae78652d4b0", "sighting--a01a40fa-c697-45ec-b741-867ae73fe3c5", "sighting--eb129dc6-5d4d-4261-adb3-6fe3c405b2e3", "sighting--4c94ac27-3147-481b-8eab-fd4003ba224d", "sighting--a0742ee8-a03c-490b-b8ba-f31c27b6c0f2", "sighting--36ab6b9a-f1d0-4363-9402-8d5f1bbc40a6", "sighting--8236e9f0-e115-4335-a49f-cc59d7845bbd", "sighting--6064f1cc-22c8-497e-b029-08e2ce1e3274", "sighting--af4c7da2-9ee8-481a-bcb7-07301e445882", "sighting--30fcd42f-c8f1-407b-ba84-1495b71f0b26", "sighting--3a152ba4-4a4c-4ab9-98ee-4898caad54f6", "sighting--32232d5c-9181-4ead-94f0-e21fec71b5cd", "sighting--d5a3d08a-ccad-4b36-9076-dd0b19efddf2", "sighting--a97b034c-24fc-4d17-8065-d5af4309f4c6", "sighting--34d581e0-b676-4a5e-b012-675181706e4e", "sighting--994d7aa8-76f0-43fe-ba58-ab19146e5351", "sighting--0f65ba53-3316-4245-8fc6-668511002c39", "sighting--7cd47c11-5794-44fd-a69c-86eb0180e628", "sighting--8079592c-e47e-4fc4-a6c1-1eeb03dcf466", "sighting--5b672a20-c1b5-4b74-866b-06f019c63b59", "sighting--af8ed2ca-023e-4eae-84e1-4c4f9e0b19f6", "sighting--596f0392-5993-4621-9896-da1bb176cc8c", "sighting--90311d78-a0a2-4446-889d-01e05890b06b", "sighting--0eb2cd24-5b30-4bf2-8a66-d034bf8b9137", "sighting--a8753cfe-f1ca-480f-b53b-d03c293ee672", "sighting--3767460a-c5e4-444d-acb4-7feef35cb399", "sighting--55a30ddf-ff8b-402f-aa2c-a614979fa0d0", "sighting--467302ce-cd2d-45dc-ba1e-a15f71af209b", "sighting--b934c922-e220-4b93-8e9a-d27d1e794596", "sighting--ecbf7f02-5bba-48f6-b95e-33ed95974748", "sighting--f242da5d-5bf9-4ce1-b68b-d9474aee11ea", "sighting--fff58f46-13ce-43f8-8528-c7dd4af1e0c5", "sighting--bfa0ac5f-ee5f-434a-9d33-d9fb83f70920", "sighting--295cc021-fb9f-4312-a89c-b69b362d5144", "sighting--b0200ccb-cd5e-4943-a6f1-d05134682f6b", "sighting--b0761a1c-d878-4625-b6af-ee01ba6301dc", "sighting--1b7c2fb5-1339-424b-9494-a462981e8b82", "sighting--5fde5f5d-6157-4bf0-b65c-b6d717214e72", "sighting--a8f442d3-70e1-4b4c-acb9-94f56dc1a2a7", "sighting--d6c10df0-0a63-4c2d-ac06-6342d8f401f9", "sighting--202dcfd4-52f8-4597-924d-f6298358414d", "sighting--706f1b71-6c71-4559-95e6-fcde006cccd6", "sighting--87f3b75a-b89d-4157-88d0-9bee9b186269", "sighting--71686b42-e907-415c-b940-7fe5315dce47", "sighting--d5410647-c232-446d-8e94-360ac1255455", "sighting--935df6a4-1532-491d-89cc-5b1e50e2a23e", "sighting--ec7cb991-4872-4d82-82f0-3a4489b7599d", "sighting--d68851f4-d259-4f88-bcb3-df363429c380", "sighting--4983cc0e-fc46-4ea1-9d78-a14c846464c8", "sighting--5cab2217-52b7-48a2-8994-f739dae5646b", "sighting--55494564-ef59-497f-862e-6c8435e4bfc7", "sighting--54eb8e3f-024c-4b21-9dbd-0975360349c1", "sighting--ea6689aa-c520-450d-8fbc-fa1c2f8530a6", "sighting--14e9bccc-1b56-43ed-a0e6-4c729a08d58a", "sighting--e36e6984-0929-4fc5-9a3a-3a9a43bb29f1", "sighting--ab502342-0656-4f5a-966e-7172aa0b2bcd", "sighting--a5d9d2a9-ad95-428c-88b7-2dc59bffcdde", "sighting--7a5e2ea6-5039-4503-b9ad-9d6aeac53206", "sighting--277d7e3f-3798-4213-8067-fb11cdc0e420", "sighting--c4080f7c-c628-4db3-a303-321cc77d2040", "sighting--d6971dc4-468f-4a41-bdef-748233ebca2b", "sighting--ce272e86-3be5-4371-a995-12219a614446", "sighting--a444dfce-99ed-441b-94b4-73e02ad7e5ef", "sighting--c78fe776-5b1e-4d06-b597-63725e8c39f2", "sighting--fb091589-6c87-4f27-9a2b-08deb3312f7b", "sighting--380a32cf-8f42-4f85-b86a-0d7ec0601c3a", "sighting--52fb32d8-21cd-4c7e-86f0-6508e8e0c7ee", "sighting--53ea9438-f2a6-499e-92ea-9ae170d0740e", "sighting--b6e1ff05-824c-407b-a3fe-fea288fa5eff", "sighting--1ed2d4d3-2309-4167-8baf-0feeae8a9087", "sighting--5f11fd3e-c1e2-441e-b4a9-148de4ce6dbb", "sighting--08435601-b703-4909-9620-c2ee9da95410", "sighting--db820d25-1d34-45d9-a6ed-41d775cbfbdc", "sighting--94c2d11e-ff19-458c-8e05-9537efb13f06", "sighting--88b52e87-d3b9-443d-898c-354e135322b3", "sighting--bf1ce296-5677-4606-9a68-bf5f675f59d0", "sighting--584a380d-5716-4991-a2d1-0d7b04049193", "sighting--59d06020-c8d3-4ebe-9902-212634985c06", "sighting--45337159-5092-40f2-afc8-c82ad630ca47", "sighting--0248c86c-b61b-4d23-89aa-d9e5dbde38ba", "sighting--20f45e4e-f1b3-4e70-9411-e327c56c2abe", "sighting--0125e4e0-a1bf-452e-a786-0bb425ccf609", "sighting--252a7cea-e77e-44b4-a8d8-7b87894c0a44", "sighting--c18c1772-92db-42df-8e88-bfc74118becb", "sighting--c7e4eb7a-d549-4627-95c3-f95bca2a23d2", "sighting--16387d4e-9862-43c6-833a-9af21706fd13", "sighting--15fbb587-3cee-43e2-9383-4ccce317f3c6", "sighting--df610914-abae-4565-aa54-18a39bc6abe3", "sighting--815e034e-c4ed-4096-9a3f-87a4b498da9e", "sighting--55927422-fd23-4856-b929-8a0d45d5242a", "sighting--14521eb6-0980-4740-9faf-ef291efd5b79", "sighting--efe8e8ce-d85f-488f-9694-5289b56585bf", "sighting--947177fc-4028-49db-bb35-c5bc9643f45d", "sighting--5ebb639a-dc74-4b51-81bb-f026b5f4ce64", "sighting--09e6ca23-a18f-4065-863e-6f233f3eba9d", "sighting--7c744656-3c41-4fd2-a33c-afc4de9542b8", "sighting--7b27552b-749a-459e-861a-5ad4af4fde63", "sighting--d7199714-631b-4aee-9d26-f6803e6572a7", "sighting--cfe07deb-7118-4470-81ce-50c01304a275", "sighting--83e1b80c-c1f1-4d45-832e-b41711716c6c", "sighting--ed8ba3c7-ee47-40b7-aeb4-748dcf59067a", "sighting--465c9ae9-007f-464c-a57f-a59f883ba24c", "sighting--5213a5a5-bfd6-45b5-a598-7c82b59954e8", "sighting--c9b7545b-f36a-4edb-a399-26c95df26a8b", "sighting--5bbe548f-6d1c-4491-9cf4-5eca6d038b66", "sighting--5f7ddda7-7d69-498f-a357-dc72531f4a47", "sighting--a3aeabc3-5a28-4841-9130-7c68d19665a8", "sighting--9f777f5b-7d19-4c71-bcdf-760adc12b239", "sighting--d0297b58-34a9-41ef-aae8-2c6e1ba09aed", "sighting--a09a93a9-b39d-4398-9c90-fd3fd8716438", "sighting--d7101ae2-5aa6-4ca7-9acd-f90d1048d897", "sighting--3cc94efd-7f35-4b8a-bd74-6cd346a5da4d", "sighting--c81ef44b-7882-40b2-86b6-22b9a1b83dc5", "sighting--67d89e4d-6614-443d-a982-ce4e0b53aa69", "sighting--05ed97b2-8cde-49c5-8344-6f363385a70d", "sighting--e7a2b65b-736f-4aa3-ad8f-ef54354ae10f", "sighting--434c092a-6780-45e9-80c4-a442073f3122", "sighting--d61b15fd-f662-4981-95c8-24759c7dbdd1", "sighting--827cc08a-a804-422a-85c4-7c8a22646ad4", "sighting--2a825d33-9d90-4030-8cbe-dfb3329c7657", "sighting--dc3f2aa6-e970-46a6-b274-fa168319244e", "sighting--5c77098e-a7c4-431f-b71b-ab72ed767f86", "sighting--40b91a05-c503-44b0-aa4a-4a712519c338", "sighting--3ba2c8f4-dff5-4a72-9b26-5182988f72ad", "sighting--58add2bd-5cd8-4fc2-bbab-5d8a4755cd34", "sighting--e41067b1-44a7-4d5d-aef2-a9e6f635d0c9", "sighting--9c91f79e-6819-4030-9ced-72831f25c1ec", "sighting--7cdb79a7-72fe-437a-b6c1-3c52efa87b6c", "sighting--5861288e-cd89-4645-aa2d-b380962ff17e", "sighting--d24fd7f4-9bc1-4a08-b534-bb13f49d86a0", "sighting--62cb16b0-2e5c-4655-b12a-b0c1b16fb4bf", "sighting--f44ebf2d-d2e0-4122-a431-29ecdc46a6d5", "sighting--eaa906ef-f1d8-40ec-b5a1-620e17c2467a", "sighting--2d890859-547e-4bbe-b162-d66ce3f5c3fd", "sighting--d644e854-0257-450d-8a68-7683d92a2678", "sighting--b795b176-998f-47d3-afe2-8158ac482333", "sighting--aaa3b1b5-7194-4a5d-9cfa-4f29d3eee63f", "sighting--da9042b5-b0b2-4547-8fbe-8ef719d73aa5", "sighting--bea12a2b-c810-4ff3-b630-a7415a16a10d", "sighting--6b8e4bea-f376-44c3-8be3-03d4988c09e6", "sighting--3c579996-8620-4125-9b9f-659b2e938774", "sighting--bc40942c-4438-490e-9221-089559a47ad3", "sighting--6041ad97-f1a2-4a4a-b2d5-f6d1b3a2de22", "sighting--c011f6e7-4658-4175-bf68-132020626002", "sighting--24fbbc75-f9cd-4089-b7ce-1b4ca777fceb", "sighting--08aabf3d-5fed-45aa-88d4-ae5752a1710f", "sighting--d85e9b15-5a21-4596-ac58-60e540c34a74", "sighting--aa05c409-d159-40e8-b5f2-030444fed830", "sighting--99683739-13a3-4212-a37d-6206c9dd9b54", "sighting--3a432582-dbf1-44ef-93f3-d05e4e6b8203", "sighting--681922f3-c9a8-4469-9281-16f0c0b07e30", "sighting--604562cd-e296-4c6b-aa4e-c711b029ad1d", "sighting--3ac6515f-9699-42b7-a5c4-2a90923b476a", "sighting--ff8d6b8c-f8bd-41b4-92c2-9dbac410b7b7", "sighting--56996380-500c-43c4-925f-2a6e0bb2b056", "sighting--47211e7f-10f9-4068-9851-413777cdd2e0", "sighting--5a51835b-a12d-43cf-bd62-d70b623fbdcd", "sighting--b11c4bbd-f508-447a-b502-1dc8923daa2b", "sighting--9b4f5e97-d19e-43ab-a22f-e9b455595615", "sighting--5d0eee8e-4f79-4aca-b659-8754f73afe24", "sighting--64054770-3244-412c-b656-95dbb4934d6a", "sighting--f155559b-3301-49cf-98eb-b4041c332574", "sighting--235d3cbc-f3b0-484d-a454-72f4b7986826", "sighting--275f3158-0e81-43d5-a0b0-9e15ec931aa8", "sighting--f916d1cd-5e87-4add-a77d-c26515830a9a", "sighting--d6ae5afc-e1af-4745-94a5-bddd65d08ed8", "sighting--4a7a0ca4-b00b-4c23-860f-8beac4de489b", "sighting--822073b3-53e8-4bdc-a484-0076059203dd", "sighting--347058c6-8553-4071-90f7-12c64cbbabf3", "sighting--c8245704-6767-4b95-87bd-f54c9d0f58a1", "sighting--7d090355-5127-49de-970b-12a6551b4b6a", "sighting--edddb1cf-fb0a-4572-a3d1-984f20d52d27", "sighting--d0adeb85-0242-4a52-8fb6-bc2cd2f30ba6", "sighting--3d7debeb-23bf-4471-8a70-2d897079e15c", "sighting--8ac3a5f8-f521-4874-84fb-8a534b725c9c", "sighting--c8d88a98-6b33-4430-9c53-f38f4497a50d", "sighting--79b25640-0422-40ec-aa5d-3bf36b1b0691", "sighting--ef1ee798-b2e0-4438-981d-6e541caff2bf", "sighting--6e479e22-548a-45b3-bb13-7bb3793ac902", "sighting--ba74a5b4-2545-4536-9558-69dc9e603922", "sighting--1045e161-ad61-42f0-9e92-01226a37fbf7", "sighting--8bd79aca-69c8-4b1b-abcf-bd07b5602ec7", "sighting--93aba6cb-c24a-49a9-8fa3-fc75c9c301dd", "sighting--c7105357-6036-4beb-8e86-9b5df0edee39", "sighting--1023427a-35da-4d7a-b2d0-e3276a9f9b67", "sighting--8bffdd5e-2cfa-415c-8da4-b8331c82f80a", "sighting--7a9f89fa-b307-4ed1-93c8-fbaa8581d668", "sighting--83b27dea-7bf4-43bd-9191-477af4d26e21", "sighting--93bc4cfd-43e4-4774-be1d-617616d451f8", "sighting--a35bcccb-2a6c-43f3-8db8-b5e8a0a0f4bf", "sighting--59292702-c013-459e-9b2e-839b93a1106b", "sighting--fdc117c8-1054-453d-94fb-786913d29b0b", "sighting--00d148ed-cc28-4ca7-beb1-acf232eae394", "sighting--310f5f6b-18a9-4723-aad4-880b0147a39c", "sighting--19d40a44-3538-48a9-bd58-667198aef049", "sighting--9d386855-a483-41ed-8406-958b752fb096", "sighting--4e5d4d4c-dc04-4174-934a-6dba523eba29", "sighting--d1349668-80b7-4ddf-a844-0e54ca73dceb", "sighting--b77f76c8-df94-4698-8d03-6c3f64aa3b62", "sighting--2f320b3c-c184-4050-b02c-c03b34b41ae1", "sighting--7b3dcf6e-02b2-403b-b5af-5a2a6e86194f", "sighting--0bdcb33f-f401-4526-ab54-60b27e80e1ca", "sighting--d2a6e208-0f01-4c72-b5ef-3f52a3928943", "sighting--ade7e8d7-879b-48cf-87f5-f8816aeda34f", "sighting--94c4d33b-bb19-4b30-bd33-e933cbdb89c7", "sighting--7cd87b4f-2633-4cae-8081-62e8af316e32", "sighting--b037329b-97d1-45b8-901b-22a20ad9f225", "sighting--84cf1e4d-4857-4c53-bbb0-b3fd2f4c74c0", "sighting--cb1d9c74-318e-4ffb-b408-f1e6fbc45fb1", "sighting--ca77fefb-f50d-4301-bda0-3f6ce616a121", "sighting--bb2cd1b7-2b1e-478b-b2f1-d4a9b54ca4a1", "sighting--14918696-a3a4-4b32-97a8-bb61035ce3e3", "sighting--5d6438f1-fdcf-46ad-be36-8c3094e3f5b6", "sighting--731005e9-9e91-4aa1-8662-2a0be0569f60", "sighting--1f47f22c-0751-4942-8c58-3a299e090b69", "sighting--94ffc862-1870-47ab-88e4-e01f6b35e2de", "sighting--8e25601c-9202-4838-a91c-540c004f9c73", "sighting--db7ddf1b-363c-44a2-8a61-733ccfbc8c05", "sighting--be8d30e5-e73f-442c-b23a-fe153ede7a53", "sighting--ac6ab4f6-74ad-439d-9c26-fdc260e5e4f7", "sighting--00d0d8a1-36fc-42c9-b5c5-df9bb8cd8077", "sighting--59c2a7b3-cdc7-4aba-af9e-923b8798ebff", "sighting--57a1d25c-6518-42aa-8b0a-640675e07d7b", "sighting--07be0c3d-6726-4612-aa74-cae7911591b6", "sighting--e6279d92-d688-4363-9d66-9e224c95fd60", "sighting--bad608bd-0b7b-43a1-87ca-1d3094b97ede", "sighting--8abbf120-cbc8-415a-a105-c539bff8ca9a", "sighting--db147cd9-4ec5-45f5-b185-28c106756d7f", "sighting--ab3ca84a-a43e-4f93-b0b0-0960b4e87bd6", "sighting--36d63acc-ebe8-4d52-b120-3b28789a3fbd", "sighting--83fd4d40-aa6c-4cd2-a8c8-59c9b3af1370", "sighting--8b9cdbcf-0d10-45c4-85e6-ef213a2f6e47", "sighting--78a48305-bf28-4c48-9fb2-5b299ca13ef4", "sighting--4f8a5ba2-a7b2-4424-b552-9f9676c476e4", "sighting--758e1c3e-e5e7-4750-9d92-bc4372a15825", "sighting--a6a21836-1bea-4f3c-99bb-aacb42858427", "sighting--b2730d6b-7631-4698-a5f8-7c2872de2ee2", "sighting--1a5b760f-3a11-4049-8c1a-78c63b0764de", "sighting--507ae326-85af-43d3-a2d3-732096374e13", "sighting--d0d5a241-441e-42df-90c9-671f48fff0ef", "sighting--a7b23b91-8524-4591-a1f0-09d7be03dde7", "sighting--337ab6e5-f42a-4d41-84f8-fc5bef328334", "sighting--f3a7d728-8a31-4d33-91e2-b4db9dafbd61", "sighting--8774d790-6489-464d-bd86-341e497648e8", "sighting--fcb92d6b-b4f3-47ae-9ac6-acdbe9258fa8", "sighting--cd3bcf6d-e891-4937-90f3-9a1f953a4429", "sighting--cfeb1f77-53c1-4f86-aa31-6418ec044d19", "sighting--94859c6a-2061-4bee-aa41-5e805b144d5e", "sighting--be44bba4-f856-4f6a-ad44-df22a2ff4f62", "sighting--fbc1600d-227b-4914-9fb2-dad971fb2fea", "sighting--3e08e45b-3d55-47f4-8df0-d74582ff3396", "sighting--a2b9ee40-e508-4ff1-88ef-d07064d94e10", "sighting--a2a1bec1-92b9-4399-9030-5c291ece0529", "sighting--141b698a-c39a-4722-8d95-797acd232f6e", "sighting--1b38a3dd-deb4-4093-a037-cff7da38b267", "sighting--b87f0166-5612-47bd-886c-c6e6e881dd29", "sighting--91e7ec9b-b187-41b2-ab22-285ecde7f1e3", "sighting--010e951e-e48e-4b4c-ab35-1649c1f87e59", "sighting--251271de-e85e-46ac-8055-bbe8c949917d", "sighting--ff31f39f-fa04-45c0-8bf0-d119956ae3ee", "sighting--3365caea-7ed1-4f0b-9a91-fbc71bb10c53", "sighting--2828dc34-ca81-4d5d-ae82-802d6c0a1f43", "sighting--50206e05-d0ee-4972-b64f-448c3ce48719", "sighting--7761de86-1598-4f02-bca6-9c800af9fa79", "sighting--4efaf22f-e6b0-40a2-ba57-fbe89bc0fc65", "sighting--087b3c0c-2bfb-43db-979f-414b21a3c5cf", "sighting--b104cdf6-0af2-4922-9545-5a75638a5c6c", "sighting--cdb4349b-cf48-4c52-be8b-351b471153d3", "sighting--a1ab463e-11fb-4b14-8083-3223044d9738", "sighting--0b1c8722-c823-4d76-b2f0-a49915cc6abb", "sighting--b93dcf16-5007-4bc8-afcd-721a3cbfa0ae", "sighting--e515c6bf-ad0e-4ff4-88ba-347554156fe8", "sighting--8c0cc68c-0467-4bbe-a597-5cd5e718ef37", "sighting--38548eda-30ad-4815-a23c-27fee060b71f", "sighting--5a4d3721-fffc-41b0-b366-c25c5167c485", "sighting--681ba972-166c-40db-9248-a2b27b91f40a", "sighting--4bac161d-c540-4795-9c06-8c9e40b6e3e6", "sighting--345ff64f-f570-4dc1-a814-4a2031692868", "sighting--c73d6819-07dd-4734-8e2c-0d058747fef0", "sighting--06243ff9-fccf-4d2b-9c5a-c15ef53578bb", "sighting--312bd182-04bd-4137-925b-3f602482701c", "sighting--96b340a1-d201-4658-97a8-5b7fc8b04e00", "sighting--65d6ecee-3f7d-4343-82a3-65b4a51953b2", "sighting--4d0720bd-7e5c-40a1-a780-7bbaa55aadf6", "sighting--2ae46e9c-d982-4caf-a850-c6c32ba680ef", "sighting--773f3fcc-79a8-4903-8444-ac02858f0b30", "sighting--6db32cb7-3b42-4dd4-ba53-2fc9859811c6", "sighting--d65eee71-3e83-49a2-9bad-8366f606347d", "sighting--500ebd1b-0066-49cd-bcf4-48a9dcd83f36", "sighting--f722cc6c-fa9a-4617-aedb-70fdaacc2cd3", "sighting--33b5f452-7d68-4be8-8cbd-af0ad722bb8a", "sighting--47a27255-2ba3-4f6b-9241-e1794ed90ce0", "sighting--f7cad9ff-652e-4f46-a202-906b756e9621", "sighting--ae32c13e-8dcb-4ca7-8cf0-5fe700ff382b", "sighting--5f952efc-0461-4c3f-a939-b38e2e0cf23a", "sighting--c06d02fb-564a-425f-9084-29f1f1aeb1f1", "sighting--3e145175-3d3f-41b0-90c0-61fda1fb87d7", "sighting--4697a88c-b8c2-48e9-b444-8c2f4d21f0bf", "sighting--161cba81-4bb9-44c4-9801-5dc285fa1598", "sighting--e3ac0dbf-0982-4f83-a134-bcf6adf190c1", "sighting--e4dae9a1-c876-4dda-a5a4-fd418b6576f2", "sighting--6f31232f-2b4b-4646-ac0f-3a39cc483a9b", "sighting--f4ba1dd4-e7b3-4eb0-8be2-04d186d2fbfe", "sighting--da2b6edb-9263-445c-a21e-46404111a205", "sighting--0e866c2c-3fee-4bce-8224-fc7f456321a0", "sighting--c0ae6a95-f87d-475a-bdd4-f75e985f5345", "sighting--13aedbdd-127c-42fb-a3c5-3a06d08541d8", "sighting--ecdaa884-b82c-4daf-ac0f-b4f6eac0e264", "sighting--8640a4af-edc7-4aa0-a632-f208d720b01a", "sighting--ad3f3466-1210-4d49-9c59-523873c2f6bf", "sighting--6799a862-9331-4aa0-85fb-a93dfcdf721d", "sighting--c5a96548-3963-443e-a102-99a188471887", "sighting--6a0051b0-af58-4b87-8f1b-7850e9051f7e", "sighting--523e78d4-9640-4f99-ba05-5237967f576e", "sighting--0a31a868-d1d2-4c2d-aa56-a54ff70760dd", "sighting--f4a23eb4-0f85-49c1-b83d-e6243eb0ab0d", "sighting--db691cad-a9d6-4ad1-8c54-9c5eeca6187d", "sighting--d9349d7b-720c-4b45-911c-d9cdf96eea0f", "sighting--6fb08164-695d-4300-ac8c-f59e63691e1a", "sighting--2da816be-7300-42f1-95ac-7e137a98ba94", "sighting--1357fd2f-3009-4fcf-98cc-d7a1a5d03c72", "sighting--b92fb5cf-4d0f-47a7-b51c-68748615f164", "sighting--64965818-a903-431d-a5a8-1dc857f4887b", "sighting--8a5a56d1-21ba-4d05-b543-1f7e70942726", "sighting--33ee6105-7678-4445-afe5-8c47ac5665a3", "sighting--a36ddee0-64aa-40df-9117-086409c3beee", "sighting--9a593945-41fe-408c-a732-ee6b31963647", "sighting--df9ae7bf-6ae4-4c66-849d-e478b0a656f5", "sighting--6093a247-784c-4c33-ab12-d142f35afcb8", "sighting--7784096c-d5ef-4325-99e3-00d71e978a89", "sighting--851d6261-213b-44b5-9472-be4913a67709", "sighting--96106539-c28b-405f-8bd5-7da44ec2c45f", "sighting--83803c87-d785-45e6-ab1f-aa70c9ba7889", "sighting--f2f692d1-1150-4d4b-a543-7dc1d119bdf1", "sighting--6a461ab5-5891-414d-8afd-37d424ad453f", "sighting--abf0ed39-484d-4cfa-9abc-507f4b6e7828", "sighting--cae2f60f-4ede-486f-b392-b52fb886920e", "sighting--301f19f3-7c66-4130-82d7-b2ddcf72bb63", "sighting--fc7bc820-d626-4efe-be48-90766b72bfe9", "sighting--9b24f29f-9624-45d0-890c-cd6a80c90cc7", "sighting--4a72f440-976c-478e-a5ef-d01cc470f80d", "sighting--81dc6747-54b5-4c04-83fe-8d176172dec7", "sighting--50b70acc-7d0f-4621-8644-23c5d9e2aa99", "sighting--ca8c015c-9d3a-4bd8-8782-8254053f7123", "sighting--6b22f147-9c7a-4d25-bfa7-656fb224a017", "sighting--3609d1bd-fb61-4737-ad06-264ffeb28912", "sighting--db31af56-4a36-41f7-8f73-c027da0a809e", "sighting--2e9afe7d-4c4f-40f8-a8d0-84a1ca2ff308", "sighting--2db86a4a-edd8-4c1b-8f47-ec15a8033a33", "sighting--f2c47bf9-8a2f-4aff-8386-e2b22d988560", "sighting--17bcb567-75e2-4264-a5c8-0d275e4c67e9", "sighting--f52118b9-a847-4166-9c2c-e1d5dccfd8c1", "sighting--68522cdf-5666-4a76-9c7d-4ccb1e993736", "sighting--98607683-af61-4fae-b2cf-d15e9ebd2c1c", "sighting--39fb944a-9d0b-4c3d-a3e2-1baed4960e73", "sighting--f64d0ae8-4d2b-4fd8-a70d-57b06277cefc", "sighting--eeedf1c6-b2d9-48cd-ab18-33a557eb7fcf", "sighting--bca38a0b-6471-40eb-8b6b-ca94379689af", "sighting--c5d6c8d1-771b-46ae-9bc0-f5c9640f6d88", "sighting--74a8e1b7-458c-4eca-a5bd-80c39216eb9d", "sighting--bcfe9ac2-8d30-45f7-8c0c-02da6fd5b6a4", "sighting--695d421e-e440-49a3-bfd3-424f0cd4d8cf", "sighting--505aaf1e-6b24-43f5-bef7-8b1c67a3db9f", "sighting--618ce93f-901b-43b4-9473-a8a0656c4aed", "sighting--51e77c6b-2c51-4374-a8c8-2991c8a5e349", "sighting--13361090-1ecc-4f42-8fd5-2bfb3e2c1f3d", "sighting--5507a866-8cbd-4b56-827f-80dc064237e4", "sighting--37224d1b-3e23-4352-8bbd-38cc65827c55", "sighting--6d616d49-3ceb-4b2d-9f28-c29d5c96f8fe", "sighting--ae3a32ee-26e1-41c8-a74f-eb9950bd1c99", "sighting--0bc59113-db1f-4bc8-abac-3b81a859bef7", "sighting--25720ce4-4a64-423b-b048-eb163cffd17a", "sighting--76944476-7734-4325-bc37-a587d02143f1", "sighting--82164f65-f808-43a4-abbb-ac7f23f5f7f0", "sighting--6363b521-1b75-44ac-a8b6-f6ce9a03c82d", "sighting--e6249556-88c6-47bc-80bf-3dce06b224c9", "sighting--310469e6-03e0-46a4-9a5e-cd40ba0d2547", "sighting--f5f8fd48-dcf8-4247-b3e5-6d582d173442", "sighting--186e4a15-46ad-447a-89a5-a25bf725324c", "sighting--d9295c28-36e5-4488-ac49-d98e308b3940", "sighting--1ba67a9c-6486-4f19-98d5-2536efe4c4e3", "sighting--83f026b7-14d9-4f6e-864a-5b1aff4eeedd", "sighting--15899b3b-9e00-4d80-accf-db67631ee800", "sighting--85ab6f4e-4e50-4596-be39-480d15a7d07d", "sighting--f15b46a6-6d9e-49a1-ba37-ced9206945c1", "sighting--6d18ad5f-3584-4243-a848-3b717259b827", "sighting--78ed1beb-3939-4048-88f5-b3ffa22bea50", "sighting--70456338-6aca-4a55-833d-461d2ed86ed7", "sighting--4b169d8c-b0e0-49aa-9250-249b3a6190b2", "sighting--ed29b44a-f024-4d0f-9ab8-2d1d6c5206d6", "sighting--f4666466-2d36-4956-a7a2-6c0c7adf90d4", "sighting--cb99aa80-e688-4e8a-8ca4-25752694d1a4", "sighting--5288d382-e6f9-46af-a52c-12637ae7e78f", "sighting--2d9eb12f-15d3-4152-8860-3a18a0f943f7", "sighting--1eca8de1-d34a-47c7-ac53-4695beb39486", "sighting--b8917058-2f12-40c4-b6e8-0d25e1b09658", "sighting--b5864e8e-4cff-4ab7-90b6-6c42c6175b43", "sighting--e6ef7bc1-6811-4a57-97ef-74102899b835", "sighting--e113aeb5-7c30-419f-aefa-b6d4358a4a3b", "sighting--cf4d9517-f817-4f35-b0c3-12c8bbc353b4", "sighting--75cad9ba-32ef-4f80-8e6b-a82b9d95a6f5", "sighting--ce9fe880-0568-4e72-b141-a6bf075f1522", "sighting--105c22b5-a4c8-48b0-b66c-68ef542b3a12", "sighting--c4c17300-4d99-4f15-bce3-b65f89233ba6", "sighting--afde4ca4-0783-4f36-87ba-e5681d49d99e", "sighting--44a04496-42b8-4892-a14a-7802d7bc2565", "sighting--e1fefa82-1f9f-49b3-b683-07c022e1b2d3", "sighting--063eb211-ad4f-49aa-8da6-644058f015df", "sighting--c2764bf7-c976-4858-bce2-6e3f7c64a29d", "sighting--79543aab-3f1d-4b16-bf3a-86d93e7a2536", "sighting--9930e592-6c0b-4df2-b690-7b809bdf43a9", "sighting--1c1f483f-385a-4313-a85a-15209f29fdf7", "sighting--73debdc7-47c8-437e-b635-59cbd538cc0e", "sighting--e6adeb3e-fee3-47b5-9172-73a5d98ba029", "sighting--e2a8c958-ecda-42f9-b179-7bfc75243f55", "sighting--baf1f787-4f34-4d0a-9b1b-bad60bda6325", "sighting--f481a546-a200-41a8-910c-fc8cc0aa76f5", "sighting--16e6d834-b9ec-4475-84fb-4404f2d9e3d8", "sighting--a1c0f923-2d29-4dac-95cf-3437a48b1547", "sighting--0f285a0f-7a29-4cca-afa3-ce26adddc5b8", "sighting--b9d778ef-0c91-433f-9df9-b855ec1fa884", "sighting--e74d9a32-c9b2-450c-a347-ed388eaefda7", "sighting--7fe0e02b-a7da-4d51-a1eb-eda71aa3b09b", "sighting--a721b17b-4904-49d1-a855-977dba0cb725", "sighting--d8bd23ad-efbc-4991-8612-cd5531af0195", "sighting--e90d3eba-1df1-4e54-9d87-7a3aa51c402a", "sighting--8b59858f-ec89-4c48-b515-7649292524e5", "sighting--14b9a630-d883-46f2-a931-9be4335ffb72", "sighting--ea8ef736-552f-4d37-a55a-401215149523", "sighting--d83c4259-ea86-4efe-8497-eda350b60239", "sighting--1e953080-5edc-4840-9196-a20482526080", "sighting--c034328a-c5b8-48cb-bf89-ddbc589d0fe3", "sighting--df74c902-0395-4aba-bd42-73342eedb09a", "sighting--c90352e3-3daa-4b00-925c-dfee731c7d86", "sighting--62d84e22-55d0-49fc-b611-643b9a468be5", "sighting--c2da761b-1ba1-4e00-970d-274fd3db6cc3", "sighting--ba884144-4f4f-4656-9360-34d9f32feec3", "sighting--4f2a4c7a-cbc2-48d4-bc53-cbafafe630ec", "sighting--bff3b452-0b7f-4034-96a4-6f3386ee9ac0", "sighting--4b9c331b-fb11-488f-9346-65cc8c41ebe2", "sighting--4808ac3f-d070-45df-827a-4a8f7596b702", "sighting--32b88361-994f-4aac-9f9e-bce66b845150", "sighting--19b57878-d3ab-436c-9180-9be927ff8ac1", "sighting--07886639-1959-44e0-91cb-97543647135b", "sighting--3c89306d-4da4-4dd2-b64d-67eb08f2875d", "sighting--e4963740-8184-4359-a621-9c27b89478e8", "sighting--fba13dec-2d6b-46cf-b851-6a208e30094a", "sighting--afcbe68d-282a-434d-aa50-cab0c30cecb9", "sighting--d2c6207d-a91b-42fa-acb0-6bc493bdd2cf", "sighting--17b8492a-810f-4ab7-b147-8a7e4f686804", "sighting--7ca03996-0c07-43e2-9b8e-8931ace3571b", "sighting--3cb66359-3438-47e7-8cfd-3bfe4d121d94", "sighting--f714bda1-4c73-40df-881c-ad1fdde6ecb3", "sighting--7b1e0512-ae01-4054-8c82-1e77dfb63545", "sighting--0910fc3b-7056-42c6-aac1-ff55a887ffcc", "sighting--6de3b5f1-513b-41dd-89f5-f7f09d33da09", "sighting--42afff07-ab73-49cf-950f-7a92b09d26f4", "sighting--09dc1597-f115-4c1b-82bc-f018f72091cb", "sighting--ba41e535-9823-4578-8bc7-eff6aece64c7", "sighting--432dd514-fbcf-4be6-b85c-3c5353ba3825", "sighting--2d42f3b2-0277-4a6f-9496-2c6cf879b4da", "sighting--d091edf7-7e45-4b5a-9d4f-266c1b03bba4", "sighting--15375c84-4afe-423d-b0b1-3ac83f2e06b5", "sighting--dadd2b23-6dae-48ad-a8aa-b04ee40f2e58", "sighting--f6e2fb31-55f9-4931-8116-b701e185218b", "sighting--16dde685-90dc-4cd9-86fa-37f4ce5d3c9c", "sighting--d1b0fa98-3604-4b09-97f3-eefaa78e2500", "sighting--a7980fc8-bb73-4919-af16-77dc3f13a9ee", "sighting--504f0a96-4e89-4462-9f79-23c76ffb8c4a", "sighting--6f23eb95-1865-4bba-9b7c-ba686ace8190", "sighting--ec175926-7a5f-44f4-aefc-3558ef6cb31d", "sighting--c6059c1f-4e40-4380-9dcf-4d86e6984baf", "sighting--ef3ec006-e56d-4e5b-be95-fd893d635558", "sighting--fe9453d2-3c06-4664-a2a7-910770be8215", "sighting--3fbdf44f-9bba-4f11-8f35-7afe156f219e", "sighting--531528af-c3d4-4b74-b8dd-75532d9c5b12", "sighting--37b17ab8-fb06-476c-9b9e-c5dff9cb14dd", "sighting--57984c07-ea1d-4ce5-94c0-7f27eba812d4", "sighting--15474ced-a006-4d59-9ed0-8530ed20ac4d", "sighting--b4dab9e2-1a9a-4816-977d-5aa7b33ce01c", "sighting--ccb807c1-ad5c-4b30-8fc1-fa5913620385", "sighting--56f52c78-2ff1-41b3-98b8-ea85fd5716be", "sighting--1d2193a9-91b7-4c44-a023-afdfcfba69c6", "sighting--154cc8ec-ed01-4663-a420-cf9f8bb4d351", "sighting--291fadc7-c3cb-4367-aec2-f511b880a985", "sighting--bf568c26-89d9-4b57-812f-3deca304f943", "sighting--a8c26a44-990d-4ad1-b146-795a1c1037dd", "sighting--3c5345f6-f600-4533-bc86-7023745a2071", "sighting--3d75bd26-b1b2-4cfb-a3fc-6dec6c9c1124", "sighting--225a90bb-c400-477f-84a3-7d3b65d2daa9", "sighting--51c91544-7d4e-40fe-8d86-444b37bec3a7", "sighting--d4abd9f2-86a1-4dee-bc20-00e89f15c3a0", "sighting--dd70a694-b0f5-44bc-ac01-1d75ff9677a8", "sighting--e145046d-f723-40cb-b066-49793f942d89", "sighting--a433e838-f4cc-470f-8abf-94fcb5d9ee1b", "sighting--f147e842-aa33-4d60-b8ba-bea8978345f7", "sighting--210f20b4-c492-4825-b12a-f278a649de56", "sighting--fd353028-80b8-48f1-a573-e52b57e24d72", "sighting--a84e2966-41bb-4f4c-8552-5fbf690f69e8", "sighting--c475447a-6b00-4b3a-b7d5-a650b022fd12", "sighting--f9f5aa04-147f-4b2d-ab91-33623bd95de4", "sighting--8defcbba-ea8c-47df-892f-e908d8da4ba0", "sighting--ff8b1bcf-74b0-41ef-8963-b8cfb9f1748b", "sighting--edba77f8-c783-45ea-990f-ebdc2c45734d", "sighting--1baeefef-a557-4b24-97f9-880e9cf88f57", "sighting--6dadb178-ecb0-4eeb-b441-72afc0605eb1", "sighting--436f7134-d96e-421b-a8ab-0ece70cae376", "sighting--0b7946b0-b26f-4de3-b733-4d0c4ef70f1b", "sighting--dabad634-ba73-4648-b76f-7ffcaff2f8fd", "sighting--a68b6b3b-60fa-41da-baac-d97c69f26190", "sighting--87f0d55e-6dcb-43f9-ae58-c99e9af141d4", "sighting--561c1a28-ade0-4968-8066-fc8f50ec8425", "sighting--35db3385-92fe-48d5-9c08-b9854ee956a4", "sighting--975e98a6-3d81-4a04-9d1c-c114ac9bef0d", "sighting--57b690f0-94ef-4b66-a16c-55af249c7712", "sighting--fd8b8a19-8799-4859-b416-fb1abf2ce1e8", "sighting--c61d8db1-711c-47ff-91a5-d30c2c1b3064", "sighting--892958f0-41f8-4080-9198-24d710560bf0", "sighting--4dc29a5f-b02b-404c-b6ff-621189efcf1d", "sighting--be9e7c06-61be-4e77-84ad-7f43a1c5cf91", "sighting--f28ca24d-bb97-4ca4-9fc9-aba527a6ee1f", "sighting--cfc99acb-5b26-4085-a61e-0b6e8c0e99a0", "sighting--a65c9227-7595-4fd1-a098-e24427916066", "sighting--37b154ec-2be6-42b6-8bec-cd4b712f5acd", "sighting--15815c5b-e01f-438c-8a10-d2286d9d6271", "sighting--01e3cb22-ecfb-4d34-b63d-d3f472a7f812", "sighting--c70984c1-4832-4bf5-afef-c1f36c2c9a29", "sighting--1fa1c50a-673e-4147-8773-c2ff696c3865", "sighting--db15228e-94ed-45b1-82c8-28a8d0ca42f5", "sighting--f0b0c550-6f7a-4388-9f37-07dcd738cf68", "sighting--61cf61bd-5e94-4fef-b3f8-a418c598350e", "sighting--0e7023b4-9fd1-47d8-8755-bc01101b6ca0", "sighting--a7b75d8d-feba-4818-8332-246945ea3f49", "sighting--7c901a66-dac0-4433-8190-2b33e7616aea", "sighting--833542a6-220b-4973-8425-4d8ea24e6afc", "sighting--b829b7b6-4df6-45e8-8b33-474304472475", "sighting--05d61bf1-d99c-4f4a-9770-676c914c1e9a", "sighting--5fe680f9-fbb1-401f-9ecb-5990d6672922", "sighting--e38e723f-dcee-4957-b128-02f4ab25871d", "sighting--c1892c46-e42c-4906-8b9f-2147342f1db4", "sighting--81041d77-f7b9-415f-a884-d06d7ea436c0", "sighting--0d1e99c4-1499-4205-be0c-f5a5e7272fe1", "sighting--015a0f6a-83f6-4586-af57-867b26cce571", "sighting--4d18d276-1e06-438c-b46a-30db5a4af66b", "sighting--df50a0df-8510-42e3-981f-0bbc690dd8b2", "sighting--5320b519-26e8-4a8e-9c5a-5319885f748a", "sighting--58eb6051-4442-45a6-8353-b69c40c6bb6d", "sighting--d53f01ea-b132-46d6-9f55-7af0f95143b5", "sighting--bfff2ed5-eb71-4795-84b9-1b6b35396a5b", "sighting--1327f2c5-c581-4623-8183-3aaa19a51cef", "sighting--bf37294b-8aea-48ee-a53b-5092785468b8", "sighting--5cff7f95-b70b-441e-91a3-47a0dc7f160b", "sighting--b736979a-93a9-4fc5-b311-f8c1d84d39c8", "sighting--39aa30a3-f890-4ec2-9b97-16e90436e9bc", "sighting--8b732a93-c623-4d76-aaf5-ef1e09925c2e", "sighting--bfaf4826-881c-4c23-ba80-e061f140e19e", "sighting--ec89653a-be6a-4673-82c4-6309e4eee5f8", "sighting--28e66d39-ec64-46e1-ab81-43a04702f3b3", "sighting--5f1c84f9-d3cb-4513-b297-38409f2844d5", "sighting--2e62c5f2-8c17-4ff6-a604-15cea00793c5", "sighting--b583da31-7ad5-4aa2-a6ae-218e62536219", "sighting--1947816f-a998-4c02-b451-8e91b1d51407", "sighting--65c86300-1975-4d18-9c36-ae9b3f4b93a3", "sighting--1361197d-ec01-42ea-adbe-fac9008686be", "sighting--fc21b058-8c60-499c-b350-05a835a0924f", "sighting--7d268183-7977-4524-92d1-36ddd9598d87", "sighting--3a917718-a04c-4ffa-91e6-5fc68f693d07", "sighting--4066fcd6-71c8-448d-991c-11eab5556815", "sighting--8274bee4-066b-4afb-90f5-649c885e55a7", "sighting--9dabcb1a-dd1b-41d2-b876-ed9b3c794ac7", "sighting--2ecfd339-490b-4692-b0a7-38e869cf2671", "sighting--d0c23f8c-2b15-4001-89e7-5ac9e4616922", "sighting--02d60717-3823-4ba3-9c2d-edaead38bca1", "sighting--361938f9-2545-4113-a9c1-308913b2ad5e", "sighting--794817f3-65ed-4fa5-af5d-c6fabc360799", "sighting--28b592e8-1617-4c19-b0ca-9ee2135cc7e0", "sighting--99c1e364-74e7-4ef7-9dd6-9e7ed82eaa7d", "sighting--21991347-cff5-4161-9b78-af9941a3a3e2", "sighting--3b454f05-ba9e-48d5-833d-1b6bdb080ff5", "sighting--ec06b67f-abd1-473a-ac76-f40c1ceec2f7", "sighting--07aabf24-bc0a-4ac9-bc9e-978e636c26d7", "sighting--ae6ebe18-698e-4a41-8cc7-3d409a360714", "sighting--1f24bfca-c1d3-4903-b9c1-c418a80008ce", "sighting--cf84c052-dbbb-4d88-bd06-e2212fd4f080", "sighting--6de8fe68-cbdc-45b6-8379-227c089fbae9", "sighting--edaf9660-7f55-4f96-8b13-4d98e7784e93", "sighting--5ab2587d-f486-4261-8bef-950706989cd0", "sighting--274d7172-4161-4fdd-9fbb-ee2e20465387", "sighting--9f553bb2-a466-438b-a0bc-6071581bc726", "sighting--7c2be004-8055-4338-86df-668a2db4c34c", "sighting--5ce179f2-2b56-4c09-821a-8b59d1e3f395", "sighting--e6f3db98-154b-4023-8925-8ccdf301bbf4", "sighting--8f3e5273-45e7-4fc8-88e6-ec3d7e92a8f1", "sighting--e2dd6cce-e404-4978-9acc-21291daf2e6e", "sighting--3fac7957-0609-4e28-87df-def4b3c37fbe", "sighting--c1328b0d-cf31-442e-959d-adc646322c1c", "sighting--3af18d38-9d52-4872-94cc-4b3b5d707be9", "sighting--a574eb73-e404-4c8d-a7a6-63f89622aee3", "sighting--74fce189-d8d6-4f13-8f24-3f7558045f5d", "sighting--6337776b-8e9c-4957-a12f-c31ec33e29d1", "sighting--0d4ba148-31ca-4d2b-92d1-9c3f1188aac5", "sighting--316c8feb-536e-4ab5-87ae-a4d0dcf823a1", "sighting--ad8880c1-04ff-4658-966b-4cd1849da374", "sighting--0f357c27-b424-4431-9019-e39c4d5a4bc2", "sighting--f02934ef-0369-4f69-8386-8fe0adffbc5e", "sighting--f4d24b86-b9df-45fe-b3df-60729873808c", "sighting--5e69ef21-7b82-4ec6-975c-95d07d0b6d02", "sighting--c2ad14db-3f96-468e-a6c2-e5f5462bd939", "sighting--55d08977-025f-4ffb-b6e2-5ddae65a7b9f", "sighting--75a25267-78f5-4223-8223-030c13149bf0", "sighting--78011621-2648-475b-9940-3bee02af8238", "sighting--aa6b2669-4cd5-4554-abae-31758eeba195", "sighting--336f9b12-233b-4c09-8f34-5bd9decd83fb", "sighting--9aaf2980-9320-49b2-858f-99ade6d1f8b4", "sighting--475a1252-6cc3-4b24-a88a-f07ce9557330", "sighting--9292cfda-53ae-468e-b72e-fd293cb476f2", "sighting--4391006e-5dc4-4561-a1e8-d106db9e07a3", "sighting--15d32e99-a6d6-4693-934f-0f4765fb9832", "sighting--e3058705-5327-4b0b-95e9-9e9351c26140", "sighting--2c1b13ca-66a2-4d0b-9d13-1f69ac05f65d", "sighting--88bb4bcb-a2a2-4914-bf70-9ae9238696dd", "sighting--54890f51-108e-4c0e-a564-574fdb07e5fd", "sighting--73a1a7d9-8b6f-404c-b4b5-f4bd4f9fd92e", "sighting--8af084ed-0a63-42c9-be6f-2010140456ff", "sighting--7946c279-f3bf-40e2-b9be-c3de393c2596", "sighting--eb626499-e81c-4f14-9f8d-89926a2d8bab", "sighting--d2ac7f92-1325-456c-989d-a115880e21a7", "sighting--7c51235f-8d6d-4839-9732-dfe18043c09b", "sighting--da337b3e-b578-4721-ac1b-ebeb9821b78f", "sighting--86863d2a-3a55-48c0-a669-ec49076270bc", "sighting--c01fe46e-b13b-4355-9629-30a6dbb2172b", "sighting--6ac26dce-c8a0-4775-b078-44862c04d9f5", "sighting--44798f18-63af-4f10-886f-03143f111cbe", "sighting--a9dae004-2abb-45d7-9375-39f3860b6aea", "sighting--87815924-929f-4674-9799-3e6edb996d61", "sighting--4a091406-e509-47bf-98e6-4092469f035f", "sighting--e03b09c3-6fad-403f-bbfb-bedab57c449c", "sighting--a54d0f06-a5a9-45db-a9ab-14f4df1c94d6", "sighting--99fe770b-ad35-4e06-be01-6864719294e3", "sighting--4f2bc36d-155a-46a0-8c6e-1adcc02e19cd", "sighting--1286c04b-e78c-4c67-8eb8-df0478ddda1c", "sighting--07ab0c9f-7caa-4e57-81ae-a70ed9133d33", "sighting--1632f7a0-eaec-4491-b8e8-a374181f4b0a", "sighting--6c572132-1f0c-432c-b716-85f808daa58a", "sighting--f15dccef-c537-4230-80cb-4925cd09f104", "sighting--39eba203-fe0f-4fd1-ae70-4264830c68ff", "sighting--874ef3a4-f1de-461b-8623-e0924ec3e2c3", "sighting--14ef6087-f90b-4317-84cf-7e3c792a30ef", "sighting--fce152a6-555e-422f-bfbb-14e0a73f1a82", "sighting--221ab1c5-88f0-48eb-b2ea-949e70e79c36", "sighting--fd1d37e0-0427-49a6-9769-eb891d130d17", "sighting--43658b5c-d89e-4749-89e0-10c216952a3a", "sighting--cc73968b-2e8d-40fc-9730-94836b907f2f", "sighting--7a6c0560-1b44-4e26-9dcc-5f67b62a7440", "sighting--8ec288dc-4b0b-48d8-988b-bd0ca29eaa1a", "sighting--bd8d49f0-3296-436f-90f1-f8cf04f5013c", "sighting--64a1a053-4e54-4d4a-b250-d9cd9e234e7f", "sighting--f5c1accb-c96c-4165-bd08-b845bcdac1a1", "sighting--5b20bf34-9de3-49ad-a186-bcb6b71c4889", "sighting--306c24fd-6a0a-40b5-943d-fad7ef44be62", "sighting--7fc69703-501a-4b98-9440-beb05c1a1480", "sighting--25f8946b-863b-4ede-a894-44e334ad72b0", "sighting--8e07204b-948b-4ee6-962a-efebd10f60b6", "sighting--63b6e371-30a7-4a55-8fe6-070577f0dffc", "sighting--13d50101-4d7c-4c07-896c-b85733604822", "sighting--ea35abbf-c664-4d1a-824b-1ccc4d75254c", "sighting--b0aa0122-a2da-455b-a0fc-5ebe70cb4213", "sighting--c1320758-97d9-4243-9b8b-824f3bbef979", "sighting--73be254f-f1bb-4b16-b9e9-8f10c5ef9abc", "sighting--96f8b925-7df2-493d-8e31-e3d1fe4be334", "sighting--ed0321c7-32cd-45c9-b983-5352a0fab12a", "sighting--545e890f-4209-4163-a6b0-7d235122ab61", "sighting--bb02010a-f0c2-42be-887f-d1c98ee1e406", "sighting--22e541e3-8cc0-48e9-8046-b6f97c5f92fb", "sighting--76f3b035-c0cc-4c68-aed0-6b6a3a822c13", "sighting--180ddb16-03e5-43cd-bb91-33683d806197", "sighting--9eb8b1f6-a1b2-4d8c-ae81-0c1e921eb552", "sighting--dc954bec-5e9c-4f51-92ab-668731c53835", "sighting--4cdbf711-a80b-43c5-8274-25dde556ead5", "sighting--665f3d73-4f17-4414-ae73-534c7ee9fa28", "sighting--9239583c-7d85-4a3a-b806-bcfa966458c0", "sighting--bdd68795-6049-4d88-a69d-2807de739c6f", "sighting--2be23eeb-22bc-4855-b0af-d8ea02fec172", "sighting--c326f8b9-a949-4c2d-982c-5208b994899a", "sighting--4d7e5f65-4b84-4807-85cb-fbac8432c413", "sighting--ecda5e16-adb0-4a2a-b5d0-cf4ffa8a0d55", "sighting--8984f66b-339b-44c6-b699-c87bf0ee5515", "sighting--45d37bf4-e34c-40b2-8e03-6833c1169e27", "sighting--09eefc02-84f2-4869-be8e-2b85c799db76", "sighting--9c0a4525-f5e6-4594-bf67-f592b1609e9d", "sighting--7c50950b-3479-4a95-a275-b636b6824835", "sighting--d1eb8312-b9cc-423a-8181-b3fe6b4455d5", "sighting--9cb04f52-c1bc-45e6-a4a9-e71049132134", "sighting--7dbd269b-e51c-4e9a-a4ec-bf97b260f705", "sighting--ed2f5bac-aed5-4819-b8da-de836296eed6", "sighting--665939e9-9ae8-4dfb-92be-cf79a15b8d57", "sighting--bc30acca-348d-46d3-aabe-f119b3ed48bc", "sighting--d2e3dbfe-15dd-41f4-a912-8ff1b320322f", "sighting--0f5c9bf9-7835-4de0-853b-ca4001de5908", "sighting--11b2a025-ffb5-454a-9efc-076d0bb52955", "sighting--fbcc2ec0-e3f9-4ac5-b883-261db7d86b49", "sighting--8cb50488-732d-4f6d-9cba-898f43c7024e", "sighting--0361cb70-6aac-49d6-a375-b9dc5f206932", "sighting--f03dd906-58ea-4049-8af5-1d826badafbd", "sighting--bc93bf38-1c24-4d50-8e23-ef860125d909", "sighting--44dfc676-900b-4fca-a242-0e64b6a73e71", "sighting--000ce4fe-f097-4032-ac10-bbf382e13832", "sighting--6719a366-8947-44b8-8295-90efe86317cf", "sighting--4f54484d-faa5-4836-bd64-91a62cac6d69", "sighting--b70f8c41-9f73-475f-b7db-d2b97b7df04e", "sighting--4c1d7556-483d-4100-a54a-6007884de441", "sighting--33c148c6-0160-4b01-9705-df354b69c6de", "sighting--0a273321-9acf-4e26-bcc6-ab458f84a1d2", "sighting--84be20c7-9213-4288-9aa0-6b2988ebb2c4", "sighting--292be84d-cbd8-4320-ad0a-edaf775e3f7c", "sighting--fa14a931-2092-4220-9264-8a6d94d822a8", "sighting--4c27136b-c647-48a1-b13e-dbf13831c673", "sighting--88682472-216c-48ac-bea1-db111dab4f36", "sighting--c58dfbd4-df44-4f3d-9dea-9d8f4209bbbb", "sighting--38a658f7-aa94-42ae-b1ff-0d672f8be09e", "sighting--6827f399-8576-4e72-bc67-5fd5e8bce574", "sighting--f45ffbf1-7b24-4e4b-8a5f-c583dd6dc853", "sighting--94e6c142-4004-43a9-9df5-1edc863efcbf", "sighting--6feb5961-70db-4736-a194-849d9c6fa1d1", "sighting--ef95f057-f0de-43a4-91f0-2e96d2e0fc8f", "sighting--577e0a2e-33a2-4056-b2dc-cddf4b994717", "sighting--ca8a31d4-31a6-4d8e-8ab2-97e0e56d3759", "sighting--f8a12548-6002-4318-bbb3-d95de721f5df", "sighting--c47eb94e-ad66-40be-a96e-f1678d708a56", "sighting--f7556c3c-0f54-4c2c-9459-41dddbaca8e9", "sighting--27b57f43-d5c1-48e2-b2e0-3592b8de5a83", "sighting--0547221b-d658-4f39-b7bd-f08a81117924", "sighting--3a0f96f4-d1e2-48b8-8579-bd40e3114692", "sighting--9de9c288-036c-4361-8e5a-c7789cb732b7", "sighting--ee5c6d1a-e4d2-45a5-94b5-c8747e6f763d", "sighting--30182cc3-6dcc-47fe-ac0e-5e72ab483ab8", "sighting--8578f614-0ad7-4e2c-b27f-2722950a9f9e", "sighting--ab6c9cd7-246d-40a4-a493-aac2a40dd941", "sighting--aec5bc4b-f13e-44e9-8533-becc5ea5361f", "sighting--5000ef75-124e-4b82-ab45-e7fa38c1f294", "sighting--e63ca0a4-c687-4efc-be92-23a0580a38d5", "sighting--2abf7247-0936-4655-9502-3989c2b1787a", "sighting--1184b683-21f7-4132-a764-d49fd98f925d", "sighting--801a8dc5-9b09-4fa5-a14e-8612b4db9927", "sighting--a37e13c6-feb9-4e9a-88b8-cd0b351f0167", "sighting--22387a74-e08c-48dc-a9cb-baec28091ba2", "sighting--9b1110a4-6b6f-44f2-93c5-c2ea00bf2d37", "sighting--20a15623-f983-47fa-bdd8-9595277760e8", "sighting--765f6926-b296-437b-bd0d-d56c793c2128", "sighting--cb49e10c-467b-4964-98ce-48e04a1f1b75", "sighting--508dccd0-b038-4f16-a420-b3574f3d17b1", "sighting--a51974b7-83b6-4ad7-bd46-ff2efd29a5e8", "sighting--b6f53e4c-d2dd-450b-8042-15b452b882fb", "sighting--ebbcbb85-0e51-4526-8118-e3e1908e98bc", "sighting--c945a368-1fd9-431a-8b4f-f24e6efa6786", "sighting--e1d9ecf2-4af0-45d1-bdf4-0463f16b24e5", "sighting--4846b537-2981-4b0d-85fa-a79c0e3cf56c", "sighting--7e6d2083-0d01-4a29-9eef-54d5deda5d1c", "sighting--6067c513-e831-4216-b41d-3030ebdf4a84", "sighting--b1fed360-b448-48a0-815d-560348e7b537", "sighting--37569b6f-89cc-4a5d-b5c4-f10784216e48", "sighting--07c2c188-ffbc-4d71-9d73-bafc9698b893", "sighting--1a523ec9-2ea7-482d-a678-5d998cb9c925", "sighting--9cf8e704-f143-4aa9-9187-351cf1cdf17b", "sighting--d29d375f-ceab-47f0-bb5b-9c2a65200716", "sighting--50a21b63-1747-4db4-9718-841878207026", "sighting--99bcde8b-3c1f-43eb-b3ec-f1b1b0cd6ff5", "sighting--f072f653-e38f-4f87-b484-876b0b99ceb8", "sighting--c6444bc4-69b3-45fe-9075-f378e0873743", "sighting--e1299d7b-0ad5-44d0-8398-9f782b4a9c95", "sighting--bf3bf4de-cde7-4b67-9248-62e79e8d32ca", "sighting--5a06793f-5747-4251-9729-dd6c9ceca3ef", "sighting--2d6f7368-0fcd-4c12-beb7-1dfd1285b461", "sighting--7c592cf3-9afb-4be6-bd4d-e21bfab3c840", "sighting--3e3d6cbc-4e48-4c36-aff5-bf8ab7365e8d", "sighting--4eb728c6-1a57-4aae-99f0-f88e7258def7", "sighting--f9d043e8-75bf-4288-b880-a6124d7fde89", "sighting--23effcc7-9698-4e00-a2f4-eb6bc39fa65a", "sighting--b17cd2ab-0622-449f-99d9-32bf5a837dc5", "sighting--4e820030-1df8-43ab-b12b-313749313de7", "sighting--167b9d0e-0be5-48fe-a7af-5cc3f65c36e5", "sighting--57b18248-f470-47dc-a8b6-1132d059f945", "sighting--ea5bc887-783f-4023-9ba6-f37ce512363c", "sighting--443def10-541f-4d24-ac25-efc55bed6da9", "sighting--483dc413-b822-4eca-a853-dc5a4e1cb1ae", "sighting--24bc43f0-65df-49b1-8cb0-b27c0d80457c", "sighting--2246fdd9-985a-474e-b971-21a510e6549f", "sighting--66391bf3-7372-48b5-bfd5-058c248e21e4", "sighting--648e6f94-3c56-4d4e-b1e3-7d6c8cd91b42", "sighting--15191e01-93df-4e11-aa46-c81ff586ae72", "sighting--eba1db8c-4bbc-4688-aa94-d160aa28c751", "sighting--feec8bd9-dd9a-4987-a3be-5ca81117c3b6", "sighting--3685ab56-59ef-4e10-b74d-a52635cb88fd", "sighting--490cac6c-569a-446a-b071-036c60477967", "sighting--5db8497f-d199-4d1b-98d1-1adb9bd2d86c", "sighting--cd242210-ef39-42d7-9008-87ae19ba8b3b", "sighting--41f78897-983b-4977-8f78-663d20d14c10", "sighting--1d34ae5a-b2ca-4884-a199-a9f630742172", "sighting--c617eba5-ca0d-476e-86ba-d536f52b659c", "sighting--21bdb7f8-8072-4930-a858-67dfc6e06c96", "sighting--11b39c88-7f0d-431f-b76f-f26d4bc997b4", "sighting--9d966988-4677-4c51-aae7-4cdf3b086ac5", "sighting--d096a02a-fa9e-4f8c-b5e3-e909f0e9c3aa", "sighting--1a95446e-5715-4701-a3b0-4fa5b49e8573", "sighting--98324c31-8126-479d-89ec-e0801c559a3d", "sighting--a1b00398-3d96-4161-97f4-a34c7c5382fa", "sighting--bda3ae0f-dcf2-49a6-85ad-016c97430632", "sighting--aba50f92-d709-42f4-8308-a93e316feed7", "sighting--21a1d28a-91fc-40ab-9412-861516258be2", "sighting--15f49e33-1a5b-4c79-8f72-709e02034486", "sighting--3c7b626f-2d9c-4425-9b6a-a4f8151eba93", "sighting--d9599da1-dcfd-44da-96fa-bc71d8d32bbe", "sighting--fd395414-a3b2-4094-a700-b90d60a59e73", "sighting--82e37bb4-8646-46a0-952b-b7b771890339", "sighting--82a91000-12c3-44a2-badf-fb36d1ca6b22", "sighting--c94e5641-030a-4349-9b15-2c8b7dc09651", "sighting--8a87665a-9748-4f61-bdc7-d68e23d74738", "sighting--be151388-e870-4b81-b197-88ee7579f2f2", "sighting--099d761b-0e61-4878-b099-2cf9a3a2b248", "sighting--47cb6c7a-27d6-4593-9855-b47ab85347db", "sighting--e82923a9-a492-4891-b19e-1fbf05d5c5c2", "sighting--50263c8c-ae50-4227-bb18-9c3634a41ff3", "sighting--be8db632-01a6-4863-8da3-63e555a6ffab", "sighting--d264393f-9a15-4361-8432-caa016d8c310", "sighting--91a4b1cf-966a-4182-a3e8-9dc97f85ea88", "sighting--21868296-56e4-4762-9369-6c14ed8ccdd3", "sighting--add6739f-4c87-46c6-b973-d35b637a1fc5", "sighting--2e540aa9-a493-4eb1-a6b1-91e9a8831ad0", "sighting--d3ae62c8-808e-4158-8548-c29abc830d34", "sighting--906d6dcd-30fb-4ef4-b4df-aae848953dd4", "sighting--f637f053-4703-4106-a189-7331b0a9f086", "sighting--dbc0c9b1-13b7-4df8-ad6b-8810711952ed", "sighting--dc3da36c-8f61-4c36-a9d1-0e4c619191fb", "sighting--5faca652-9d13-4a59-8a4f-4b56957e6d03", "sighting--73b2dccf-fdbf-4f7b-bd74-0b58f5389f47", "sighting--2007c1d0-dfec-4688-9473-89de83b9d01c", "sighting--181db2f9-5f85-437a-84ab-1b3a9d035893", "sighting--b2df02b9-e5fb-4c1e-b2b5-f78deee5a6e6", "sighting--48798846-2138-4c3f-85e1-16bbc1c740e6", "sighting--9de86fa3-26fc-49b5-a3ab-6e94a5b9a98f", "sighting--43ba6d59-3b36-452e-adb6-2cd22db2a89f", "sighting--cff12bae-b137-4689-80fd-e3ed22c52289", "sighting--d6f54346-1f44-4439-a115-f5ee14514e24", "sighting--a0ea403b-fd75-4d92-93fc-a64a89d0d8f5", "sighting--5b70f6ed-9b95-460e-b767-96e1890697a6", "sighting--931f258b-2e0e-4ab8-9912-5d0176be9590", "sighting--6d0f1068-374e-4861-b2e8-70ac9154a401", "sighting--05518776-a6af-4a62-8e83-d3e21750f3cc", "sighting--ca62e3d1-8cb5-4660-8937-0466b6b64113", "sighting--ca270dfd-f259-4ff7-9438-6b4ab4b96c48", "sighting--cfb84d2a-bedb-43f3-ab07-48b6a3acfa92", "sighting--55a66b19-775c-4199-bb00-dfd711e8b82f", "sighting--4ccf0233-9fb5-4925-ace7-ce6d0ef88655", "sighting--71bf143c-eb3f-4338-86cb-36ee9d807a6f", "sighting--e5225eec-0dce-493a-9010-ffeda972caec", "sighting--866b641a-5c46-41ad-8c0b-87f2b5e3c455", "sighting--d760f858-6b61-4b1a-afdc-3c01a47ced12", "sighting--b0fe9a1c-6b00-4347-ab51-832fc6a05685", "sighting--17a1b6bb-18ea-405d-8c4d-5fe6791dd95a", "sighting--e0ec06bd-cfe5-4ed8-864d-3f43e72f4e36", "sighting--b68fa4d8-eac5-4189-be65-f102e3970a03", "sighting--ace300ec-6c9d-490f-88cc-981179755713", "sighting--f412608a-6570-4b12-ba23-d13b47a2bfc3", "sighting--1b9c7f32-dddc-4fe3-b96b-2ea3a4f9ae03", "sighting--8fda66dc-fe48-45b8-9145-4a37eb619786", "sighting--958854f6-a8de-457a-a1c1-bce53e568ce1", "sighting--2d0e598d-9743-4eb6-8217-34e1247c878c", "sighting--afe78d10-56de-418d-98e7-8483198c7102", "sighting--128d0ec8-aacc-4873-b58c-9f5dd644b385", "sighting--d486232b-ba2f-4e2b-831d-3f7ccaa3226a", "sighting--1297ed32-05ec-419e-a67a-f6ea54e6c9ea", "sighting--6c572550-746a-455e-8a53-3930f089aa92", "sighting--4150ce90-0a50-48ea-99ad-114ce7120902", "sighting--1409eda1-bf33-4d63-83f8-1242cd88ea4d", "sighting--6528d61e-01dc-4069-8c01-d4bce4bf61be", "sighting--a2400bd0-6ca8-4748-b4b2-35a5b16b76f6", "sighting--9990ecdb-32a9-4056-86d9-3091f6c38007", "sighting--cb427e6e-3b21-45de-8123-4d3458135a9c", "sighting--3315c7a1-b6cb-44d1-8d8c-5da6f683d528", "sighting--6b6d7849-d446-4132-9db7-49fc8de4fa72", "sighting--f467d7b3-b314-40b4-bee6-a95e1f19f94d", "sighting--b2b44a58-812d-4779-913c-13e6b38f0d35", "sighting--120a0ad6-514d-4f07-8470-50f7eaab6af4", "sighting--1f420c0e-4413-4d02-b518-6d036986328f", "sighting--91a249ef-89e0-4304-bd39-a8ba68bad049", "sighting--4a9a976b-b220-44ff-a257-5db078fd4d72", "sighting--be3f0fec-0a5e-4a59-9a0f-0afeab1068c6", "sighting--07659373-8807-47a0-b272-e8a1d6cfc860", "sighting--5d3d5403-c718-4edb-b55a-d6730e9dd15a", "sighting--2152e3df-e33a-40a8-b659-7def4d31c9dd", "sighting--5fe15e19-b75c-42a3-aa31-b6798ab48e02", "sighting--b4acb50e-9e17-49a6-a8f2-98f39a877f59", "sighting--182dce70-02c2-49a2-8092-252fdf94985f", "sighting--dae07af1-59ab-4682-b8fb-a7a501a938fe", "sighting--de4e5039-914f-458a-a741-ed417467003b", "sighting--12756bcc-a89c-43ea-87eb-b15eb8509cf0", "sighting--6579b080-3ed0-4b1b-b87f-c687d420dd70", "sighting--53f013d0-d60a-4d79-8744-77550dcd15e7", "sighting--db2575db-44b1-48fb-aeaf-1cc106b62472", "sighting--f948f0f1-1ac5-4cf2-8d3b-4a16981edb90", "sighting--83c5693d-1649-452b-b764-619fca15e71c", "sighting--0bbd9ad0-c2e6-478c-8091-f3296037a64a", "sighting--2e9bb3a3-3f07-4659-90f5-c8044e840691", "sighting--d451498e-43d0-4653-8f9d-59ebae3d5f5d", "sighting--27c730f8-83fd-49f3-8ca0-7c51759c2392", "sighting--c815c18c-1fe1-4b8a-b981-788d319b8b55", "sighting--21c4c481-3218-49a4-bb98-1803a274b644", "sighting--d1440a7c-3358-483c-b873-580e825fb3ac", "sighting--b2da7d4c-38a5-4dea-99fa-66c22d054a87", "sighting--eb37ddee-d7a4-4a60-9d9a-f821a5bbc7d1", "sighting--abfdb75f-2e22-4f6c-81ff-4b1d35ff384d", "sighting--09a86ab0-d3df-4423-98c3-f1eaa1c73e5a", "sighting--38f1a2e5-6f32-490c-aae1-71000df48444", "sighting--24d76572-0e8e-4139-9569-0b623f7bc9bb", "sighting--39e2e36c-3c05-4c6d-a91c-29059a3a44b4", "sighting--c00a888b-2607-432c-8e3d-c338bd2c04fe", "sighting--e1f6adc4-32c1-41bf-a6e0-266c64b2f455", "sighting--39b5a54f-07c2-49b3-a223-e68f6ca650c6", "sighting--85980b61-6930-41ab-b21d-91bfd2aa11dd", "sighting--788f102e-9af0-464f-a153-609756700278", "sighting--29b23ff4-ac87-4f01-86a3-c9a67ac335a3", "sighting--ec1aaa55-59bb-480d-a978-35729ecb3f26", "sighting--fb558500-622d-406e-b482-c6cc296d648c", "sighting--e4beb168-9a6e-4631-b501-76838c134bed", "sighting--be7ba6a3-48fb-4710-bab9-41dc717fde80", "sighting--4fb3ee3d-e65f-4c17-81dd-0347f7c5ef0e", "sighting--11e89dd2-eb41-4e0c-993c-72af56f23e15", "sighting--a5d2c33b-ee20-44f7-91d3-0dfa59af089b", "sighting--f7dec3df-4c2c-47f3-a3a7-342257981979", "sighting--39818847-e99b-420b-8359-3597ad277b8e", "sighting--5051768b-ad1f-4d5b-a682-4af6859fff5a", "sighting--88cc8bef-1a04-477f-ab16-715ddc6e4b4e", "sighting--c9f2e2b6-d1af-4d2d-9197-972142398bc1", "sighting--7a64c5f7-a3a1-4207-bc53-9f83513ade14", "sighting--185013dd-aa6c-4729-9527-cf5692417393", "sighting--48e95f94-ea93-490a-9d5e-41cb5882e34f", "sighting--f307092a-5659-436e-9d0d-20a8c7b58899", "sighting--397f2620-594c-47a5-9639-f966e91fc3f2", "sighting--27b62e77-47dc-4661-bf32-531476d0cc82", "sighting--aac59393-5d70-4866-bed2-6912b8e2fa03", "sighting--3325d7ba-9cc4-48e9-b3bc-705719a7b75c", "sighting--b550af31-1771-4f65-95f3-727a5068d59b", "sighting--f48aff29-55d8-44b7-9d57-881642788e36", "sighting--a0e03431-f0b9-4b36-b070-747273402b6d", "sighting--a77c1394-0d3c-4f8c-bc1c-b46b302e5a84", "sighting--20ee67e7-9a78-4814-ba3c-df9b538eb6db", "sighting--1cfbe2fe-8996-4009-ac3b-27dc1419f158", "sighting--c9a6784d-7ada-4733-9a92-82307ed6f494", "sighting--ce6ff10d-fb7a-44ea-b960-31136183c50f", "sighting--0d1ac052-9725-4d69-a54d-860f583cc1f3", "sighting--76b6cd25-12b2-4252-aae6-e2341e908760", "sighting--532c7ba3-c569-4298-8e1d-4ef120ed8978", "sighting--1656d5dc-1eaf-4a47-b13f-97da66df0dc5", "sighting--976b9327-32c6-4e79-a95c-e490b3ddc947", "sighting--b1c77516-8f5c-4a5e-8714-6bae13c244fe", "sighting--af915126-5ac8-43fa-916a-af338e84624b", "sighting--674f6291-688f-410b-aa1f-07d3843bd3fb", "sighting--cc5a3068-e9e3-4471-8559-7817254855a9", "sighting--578802a8-cfae-4af2-a692-30c5f478f374", "sighting--6069daae-27f3-47d6-830e-3cece4052d2e", "sighting--26364bd3-7125-49f0-82d6-a7ababd37833", "sighting--490abbd2-f271-412e-8bb7-48d27b75cba8", "sighting--33a63c4d-74a6-4efc-8574-55ddf4afdb0b", "sighting--0a5085c5-15c2-41f4-b923-73ea55fd164d", "sighting--799892d9-1bbf-42e5-9666-bc2726b7fd55", "sighting--9dba0c97-3a63-4e8b-9808-a924ba0e091d", "sighting--fd24de85-ec02-4459-8af0-cb8e3b8ec5e7", "sighting--4f697504-651c-4f37-a3c5-ce6e10d412ac", "sighting--1bf31811-8881-4e11-ba75-2504a21afe72", "sighting--f9fed063-87f8-4298-96b4-44c7dffe0807", "sighting--e6359c7e-dc1a-487a-98e2-97d6efa24eea", "sighting--31f9406f-d522-4ea4-94f0-e3733e952749", "sighting--cffc0ef6-b850-473a-896f-7a6ee3752ee5", "sighting--dc169144-4737-4e29-ac32-cace6b66fd52", "sighting--be1014a2-85ef-4529-b451-72f8ee2c52dd", "sighting--ea337cbb-ce9f-4cb0-a655-ef8384613812", "sighting--f1209096-abe8-4ce4-b0a9-02d1efa9f462", "sighting--1645c629-7eae-4ea5-95b5-4bf13a2acee5", "sighting--4cac0438-d8f6-4767-bc29-0a57618fc630", "sighting--e34ebee5-e67a-43ea-8a17-c27536ca1223", "sighting--288d1743-8123-4295-9ca5-849c43fc282e", "sighting--b7e45ec7-f3ab-4a28-abea-329c98ee08dc", "sighting--34982deb-cfa4-4dc9-8cb7-d34a6ee16f55", "sighting--6f930ae0-df7b-407b-b964-9e1c2d5ff5a3", "sighting--e2eacfa5-f6cf-4203-9ae3-de9e42c19dea", "sighting--c49c3f29-da29-4383-8d0c-422509457e02", "sighting--7b618bc1-888e-465c-af87-001ae00794e3", "sighting--58a77466-440a-4e6e-a7c8-aac165d5b472", "sighting--f74147b5-4444-4344-98f6-d8509daf7630", "sighting--45ab7565-9847-474f-b76a-41f976ada257", "sighting--eaedc823-164c-4fd4-901c-605c3384f5bd", "sighting--232da07a-b634-4509-9d71-92119dc96df8", "sighting--a3cf8522-6046-42e1-820d-5d13ae0c249b", "sighting--1a814f04-74ef-43a0-9e6a-6c3b2804217c", "sighting--e0f1ae19-dab9-44b0-b607-e486ee19aa87", "sighting--b6285215-eba7-420f-ad13-0f3d30d9b415", "sighting--a5c59e89-1b47-4a85-9c8f-e03c8f94e7ab", "sighting--4fd10d49-bf68-423d-95eb-f2b948eb53fe", "sighting--e7e2e4eb-0286-4098-a6d2-842622fd66c5", "sighting--07344855-82b8-4236-b26d-f8ad7d91a329", "sighting--a910ae5b-4839-47a0-90a2-c1c7a1ae8fc8", "sighting--6414f585-df53-4ff3-a0b4-28e18881c580", "sighting--4f1b320f-e1ca-4a8e-85cd-9ba8120427e9", "sighting--dee661b4-52cc-44ab-a828-a9f4cffa2721", "sighting--5cf677ce-de99-4626-91af-e4269b71a569", "sighting--1d1775a8-9fc6-4cc8-86c6-15c87155f6bb", "sighting--f64f9e85-8380-4668-9fd6-5a76e90ffe7b", "sighting--584fa5c5-b8a4-45c0-9135-68dcc509c27e", "sighting--cbd7a65d-9819-4dd6-b711-36ff30224371", "sighting--c1237032-2582-4288-974e-2edf1448ea19", "sighting--7f296976-6fd9-4b1a-a5da-47711fc4792f", "sighting--4787d0e2-c484-4fdc-a43f-0396c949b947", "sighting--6a30e49f-ac0f-40e3-beaa-9d89e35ee812", "sighting--4ccb7d32-287a-495a-aa3a-c6757ffb972f", "sighting--12f84fd1-fb8e-4a2c-9362-f7da2c219c0d", "sighting--3a56d6b5-3aae-41d5-b41e-3893a04bc496", "sighting--7e8cd1e2-721f-4185-b42f-811ff91d3931", "sighting--05706068-151b-40a5-bb80-6074db683bf9", "sighting--a67ad171-828e-4a3e-9ebc-c062ab7d81db", "sighting--f8ad4348-26d3-4414-93f5-b86dbeb8f345", "sighting--e432c8c5-d3ee-4a8f-a9ff-3e84c46ef93e", "sighting--190b62e9-cbeb-45c5-a8ef-ecf64c897329", "sighting--25191ac9-a73d-4e1a-95df-3788e57ef0d5", "sighting--187c616c-7896-41f4-a473-7eae48b93aea", "sighting--5d66da03-a79e-4ced-ac61-033355e48dc4", "sighting--e7751cfb-3247-48a7-944e-26e518782124", "sighting--7a7aab3b-cfba-4d51-8da6-73ad298dd361", "sighting--50f08377-106b-4ff6-80fb-06b0043aee22", "sighting--5aed25e1-810c-4bfa-9d92-9477fa290ae4", "sighting--69fb3593-4d45-40e0-89c4-a9a6dc5c377c", "sighting--eaf58989-3d8c-4cf9-8a18-76d4ce4e3cea", "sighting--e002dd21-c7e5-4508-8512-439fd872248b", "sighting--64e121c0-b466-4a5b-8211-d88d4aa72328", "sighting--b6d36c8c-d6d3-4515-8ef3-6637746fac21", "sighting--048fe3a3-ecd8-40ef-86da-efc91f347dcd", "sighting--06f7c369-2916-4dca-a8c6-0d8baae6806c", "sighting--64ec3144-01d9-4110-b5fb-994249f9be4f", "sighting--3348e8be-9791-49fa-aa75-3a283d40bc96", "sighting--8bbf12bf-6842-4885-a175-21e773b928e4", "sighting--566fa960-1ed9-40f9-8f32-d149d47319ec", "sighting--d9008f1e-99a5-4006-ae7a-c095f150ae72", "sighting--ff0ea144-8e68-490d-be7a-61640ecd4d59", "sighting--30219d19-58fc-4f31-bf37-80a52f89f1ba", "sighting--698b3ff0-e069-4754-8e4b-503590eab521", "sighting--f34bb7da-121f-4102-8c32-a964ed3ecae4", "sighting--a3a5c3a0-40c4-4853-a979-6cfb7544bcac", "sighting--3659acf5-c9e4-4945-9602-c2e24fd7142a", "sighting--0403f0dd-4599-4d03-8feb-85c390bcf507", "sighting--d29e108e-969c-4c0b-8f5f-18c5080bc08e", "sighting--9b2ebb1f-e878-4353-96a8-9d4e853b1b5c", "sighting--d3ec581f-944a-4328-a9f9-d8e5705f7c09", "sighting--0df64c21-450a-4bbc-bb00-8903ca673d01", "sighting--11dc04f2-da8a-4765-a499-76d1470efe86", "sighting--d43787e7-2ae5-438c-bd8c-c92dfb93bdbd", "sighting--9e4ea49a-ef5d-4d0a-a9b2-1fa54e1a056d", "sighting--cdaf04a1-4e21-46a9-861c-7ac00b74b7af", "sighting--b4490194-7b4b-496e-8264-ff8cae44b599", "sighting--c8b3519d-72c9-499c-92d7-56e48914f04d", "sighting--1f8ced5c-c4bf-4705-93e4-3733e13b7e0c", "sighting--cbeaf7cf-b22f-4259-a20b-76ceee96ab01", "sighting--3071d39f-a1f4-43a3-a975-f326dd5d52c9", "sighting--ef33a5cd-257a-4b29-a3ee-82c1d88c1aa8", "sighting--caabc728-2b4c-4a3e-a635-7be2af2cad5b", "sighting--1d50c843-c3e1-4606-be42-9d17187d5041", "sighting--ff535aae-ed86-4022-9ccd-82002d990963", "sighting--25badf69-aca8-4e4e-b5bc-3653980ad3b3", "sighting--9881d11e-183d-4af2-8a4f-8f295e108692", "sighting--3a993b19-12a8-4b51-8102-4224e0e32689", "sighting--4e23801f-56a3-4903-a293-946d11aec71e", "sighting--0f8e66b3-a362-4f8c-a314-7026aaed97c0", "sighting--b45408b1-fb36-4407-a851-c58f441d0d41", "sighting--05a9c15b-4c68-41ea-8304-46d19566357f", "sighting--94f7aefa-f5f8-44af-905d-379afa08fab1", "sighting--c39b53fa-3f52-4795-a86a-11f1cbe18aed", "sighting--3ae636bf-85e2-443f-9f29-033e4da46a9d", "sighting--92a0cbfe-1097-4b03-a24c-618d682825fc", "sighting--0f7963ab-9892-4b72-9e9e-928fb083a5ba", "sighting--5acf91c7-2f0e-409b-b315-01979523d9f4", "sighting--470d55d4-b570-4b49-97fd-872dfdd53436", "sighting--02f883a7-9697-4c1c-bff0-39dbbea397cf", "sighting--c287580d-16f4-4063-a066-554cc537c4fb", "sighting--4301f653-1682-4be2-970b-ed9876d320e4", "sighting--e460829b-ad9d-4c10-b551-4e9f6ea57cd7", "sighting--8b7ff71e-8ff7-4934-973f-fa50a3c1725d", "sighting--6c30bdb9-48aa-4255-965c-1bd409edb2aa", "sighting--2767ef3c-87b3-4fa8-bab5-8b5406b807dc", "sighting--45ab90b3-4e2b-4bd4-a2bd-0e72e8ed1e7d", "sighting--da1e17c1-9bf0-454f-917f-1e765d850d04", "sighting--8cdb4f56-fa1e-4d32-920a-a283285f2ec5", "sighting--c6eb45df-5bbe-436e-adca-faaea7235df6", "sighting--d2b3d58a-0889-4920-aef1-1ee845cc9b15", "sighting--294b2b35-20bc-4cd2-b835-3dc3594fa6eb", "sighting--ee0b3279-7502-40b4-9f30-57ad6e8b0d34", "sighting--e32c56b6-f901-431c-813e-ad4bfa2cce61", "sighting--c3fcc8a0-b02b-46c5-8c23-1502f8100e95", "sighting--5f9c5b17-ad4b-47a8-b7c5-fc8005760357", "sighting--e8145e87-7d63-4d46-ad25-37c5db5845b1", "sighting--631492cb-42e1-4b48-96b0-ad32ec7bc7cf", "sighting--8ed0b715-7603-46fd-a9b9-2eafa3877f7e", "sighting--e3aab60d-a75f-4c16-9fa0-0845ef0b1fa4", "sighting--64c8ba85-6607-47bd-834a-9ab418657c59", "sighting--2516c791-0a3b-4c07-bae7-5167336bd6f3", "sighting--44a4ca2f-e118-4259-bf28-2dfb40ed9931", "sighting--4468e0ee-a74d-4375-ae8b-865de2bfa4f6", "sighting--00b0f8e9-59d6-4362-815d-105746e5a4a0", "sighting--4bf8cc1a-e26d-4279-ae0a-acf12ec73c1f", "sighting--3c020daf-6bc1-4fa7-9bad-80589a3ce043", "sighting--9e93b3b4-bda8-4f60-ad52-4fbf147d0e14", "sighting--c0c52b15-9c38-4546-984d-5d70ee3667d2", "sighting--1c84051d-1630-4c92-80df-ba80d3443df1", "sighting--e6ca9dd2-0c2d-484f-ba21-15e418dc0928", "sighting--25466a16-d12f-46b4-9a84-010574c57e13", "sighting--c4db5d12-3a47-4a27-ac4a-1db0bfd3ff74", "sighting--5da0e071-5ca9-4be4-bd3e-3c9cfcd8cca5", "sighting--575e7c44-2bcd-48af-8f90-2ec210aa844a", "sighting--2234978e-e87c-438f-98b6-dd10653b5203", "sighting--7f496a6a-8325-4a2d-9442-ed15065d91b5", "sighting--1d627f54-c31e-43d6-a52f-f541bd794558", "sighting--3af44521-4f08-4f22-94dd-be3b1310d13a", "sighting--78427718-4aaf-4395-980c-f5c46444f6eb", "sighting--feddc762-588e-460d-a955-ffdf16643e82", "sighting--1c0037e2-90fe-4e8e-aea1-ae7ca56bf8b4", "sighting--91b93c91-92c4-4302-95f4-840040a634fd", "sighting--4717c9d9-6474-458f-994b-9f2d4ce8731a", "sighting--ee7989a4-f882-42ce-8617-77cb9de90165", "sighting--cf87f3d8-9827-4adb-b883-19ebdc0b85c5", "sighting--b9039b1f-0bd9-458a-98bb-67120c012dda", "sighting--0308a17d-809a-4a41-87c8-30d9c386abce", "sighting--94b50c64-e9ad-4269-82d6-fe1b91b0e554", "sighting--9b0e14c0-e083-4e12-b55e-5300f7d1b730", "sighting--ea694b23-0d21-47c4-8963-31abf89fbc28", "sighting--a003f48d-de56-4132-b264-4693cfdb6f81", "sighting--1378d172-2414-4311-94c3-b39608427d27", "sighting--3af1a3a2-2e5d-4e76-a7e0-85fd485413ed", "sighting--10b5f36b-0673-4be7-aecd-80832bab4b35", "sighting--b88bc15b-b8d7-43fb-8a68-d14f9258507a", "sighting--f3e3016e-1dfc-4c2e-9f10-d1f562a60784", "sighting--28c6f308-0ae6-4041-a02b-7e124a3b26ac", "sighting--3d1e2e87-410e-41ee-886e-e8a603ecb365", "sighting--22bed7ac-ae86-4c17-bd08-3a929c1bba45", "sighting--707a5269-b551-44a1-8e0d-00140c4ac3eb", "sighting--a3a182c5-fa9c-417c-8d48-006f41d32ed0", "sighting--267a72ab-daa1-4a8b-ba34-940cb94014ba", "sighting--08e6711c-4fd0-478a-978c-fbe59fc894a5", "sighting--2605c4c7-a7e4-4466-8e53-85d9b37d0c4b", "sighting--b4cbb3f3-071c-40a0-a413-04f68ac3a80f", "sighting--f418255d-19ae-4b20-ba4b-684e57f8cad8", "sighting--0667c7c1-834c-4d97-8f38-b3d4a99590bc", "sighting--a3b6c206-5a9e-4a74-bc35-d5446a9cee38", "sighting--d77ec119-f70e-45a3-878d-e546a25a0891", "sighting--ad9d7af9-92a5-44fb-a870-e1f03bb31aa4", "sighting--27aaf2d1-a972-47e1-94c8-e6e54322d394", "sighting--13573ff2-0384-47c0-a32d-3994cd232166", "sighting--37aab6f3-af1f-4454-9795-79abf477cd82", "sighting--f73fd748-5b3b-47b9-9c2e-fa18ded69a35", "sighting--275482fb-79d6-45ed-ad07-d6a9d7938e18", "sighting--d4dd3d35-4cf5-4fe3-8744-083240cd3f26", "sighting--88e1ea8e-a764-45c6-88dc-1b8270ec4bcf", "sighting--7aea8bb4-f7eb-4ba2-80b4-906875f2780d", "sighting--1096c0eb-8941-492c-a461-26b9c8259fba", "sighting--233ee1c6-100a-4895-b8df-b6baa9a60d50", "sighting--7de32425-7cab-4778-8b48-1808fa8bd64b", "sighting--9171cb50-e2ee-431a-9125-3054ee39bf1a", "sighting--fea154d6-f07d-4947-a9a8-fc3d04bdba3d", "sighting--77b06b65-83f3-40b1-8c21-816beef1e625", "sighting--9750cfa1-7c51-443c-bd2d-76528a71d00d", "sighting--5e88da0f-0103-4feb-b2fd-0946ab309588", "sighting--8a421d15-59b1-4a77-8ca6-94d57ee99d5b", "sighting--092d8d1d-1998-44b7-b9ac-2b6ffba694ef", "sighting--76c1f263-0a69-4340-8c8a-02aa885b6551", "sighting--2439ea0b-a583-48c9-9f0c-28646665e163", "sighting--d18e9434-ee7e-4ad2-8d2e-87e3de360901", "sighting--cfc5db6b-f4fa-401d-b3c8-8a35f0054bf5", "sighting--abd48ee5-3add-40f3-b84c-550c7acf190f", "sighting--8bd510a6-475c-4118-8c77-f0d7ed0cbd87", "sighting--66316519-932c-4bc1-900e-bc05add8848f", "sighting--6c179103-f1af-4e3a-b3ad-4a3888a3bbf8", "sighting--14fb0b70-1e1a-4030-b942-8d94619cab3e", "sighting--9fb1d391-c3e0-4cfd-badc-61aa40bc2800", "sighting--a88e8ff5-7011-40cf-826f-7187aee7816e", "sighting--ed4e393c-287e-45b6-b602-6be22aea7abf", "sighting--9250ece7-ce8f-41ba-8da4-b8114934dfc9", "sighting--4868efcc-1607-407e-8857-5939a19bf4b2", "sighting--5391b582-0679-4728-903c-b75db1f9ace6", "sighting--c887d6bf-50a5-410e-8e6f-7763e5290c76", "sighting--51dbf228-0b0f-49f0-a4ab-2622b4fb42b1", "sighting--1368e247-d7cd-4f9f-a143-d17430e30fc7", "sighting--cd657393-819b-4263-b751-6c1da9bf1479", "sighting--dd0f0b07-da93-4358-923b-00e4927f169d", "sighting--b0ffdda4-c1c4-46fa-bd0c-9945f56e5f04", "sighting--c8740819-2512-41ff-b2fb-219ed3d23a19", "sighting--1eb46163-096c-451d-abf6-7f2f4d5f114d", "sighting--30e0630d-4d9f-414a-b69b-bf64d436fa0a", "sighting--eb27f8b7-c9bd-4e21-aba0-d34eb11c9b43", "sighting--10e97781-8f6a-4f1c-8a3f-84483e2725e8", "sighting--3b4a7f88-7e31-42f8-b1bb-690a026e4d57", "sighting--53d125e2-ba8d-4efb-9ab4-47db058af589", "sighting--9bcc7119-2aad-4755-bf0f-dc8ab470a25e", "sighting--b1fc1c51-e01a-45ec-abd1-4fbb5f0bc633", "sighting--a5791bd9-1b55-461f-9ada-01ef45bc1f79", "sighting--acf66d06-7bd1-4829-a1fb-4105a01d4472", "sighting--eacbda27-3616-40f9-9bca-7c4ad55f2df8", "sighting--3791f6ec-2f5c-4cb3-9ee8-83fc0ffd0a0e", "sighting--49d2544c-25d2-4ce7-ab77-8cb1e92c1b7c", "sighting--ea02bc5b-2737-48b3-b6e7-ea89acefb833", "sighting--b94fa148-1b4b-4da7-85b4-0058a27cf53a", "sighting--460df82a-3a8b-4ee3-9f70-8dc3649df027", "sighting--5b3eb14a-2261-4bdf-8ff0-a9c35b7f1076", "sighting--7cf0dfff-2fe6-4180-9e6e-106713ee32bc", "sighting--1093a265-ba46-43a3-a061-85bcb99bc79d", "sighting--201b7424-8e6d-461a-841d-8528b7484bd7", "sighting--6e5103ac-2909-4c20-a976-1ff295d2698f", "sighting--129f4c41-03f8-4f24-8f7a-21e0f3f86f7b", "sighting--dd330fa3-a050-48ca-a3b2-5ac581545b01", "sighting--1ff6407a-d2c2-418c-bfd9-9789b1212e61", "sighting--5dea00b9-9a35-4f51-98b8-49e39c5a6277", "sighting--4bec134e-d0bc-4c0a-b616-7bf23bf88634", "sighting--17340879-aa0b-4bbe-a119-f25dfe8fcb70", "sighting--34369137-f92f-497a-a9cc-f56aea1bb14c", "sighting--34bf44ec-945b-4dce-a819-ea48adb67552", "sighting--8986eba2-45eb-459f-958c-10f459e07677", "sighting--a2b8fe51-a1f7-4e2f-acd0-2d8c38f89d23", "sighting--421c6a58-2e02-450f-9c90-fcbe18597634", "sighting--4925b990-ac6f-4eb4-879a-4c7292399568", "sighting--c05a58dc-f4e2-4e50-a7ec-fcc346376380", "sighting--0442d7c5-d566-4c67-8c1f-3a0e3b6cdbd0", "sighting--219569fb-c475-43ce-a7b9-be53c3a9348c", "sighting--8981d679-d61d-4c34-8b0f-bb904ac17f60", "sighting--c0e71165-4f72-4f33-87ca-83b5a67a7c7a", "sighting--0a4eb07d-d472-4716-9ce7-b7d633d87fb9", "sighting--2ec28b87-301c-4865-80e4-21f80b488ae3", "sighting--cf10593f-9599-4851-824c-bfb0a2363234", "sighting--11509e96-c022-4ad1-9306-3a6c8101f4f2", "sighting--441ef597-0131-42b8-af0e-8b5f669ea241", "sighting--6957faf2-8a14-4a1c-a435-1a0b5cc93eff", "sighting--3e93a312-d79a-4dcc-aba9-e78051295d9f", "sighting--b29111a7-ad7c-4963-96a9-19420d3dd171", "sighting--4464e0d5-c891-429d-a7cc-b0f6bbe84b51", "sighting--3a6924d1-3ab3-451d-a05a-d3db0e37eeea", "sighting--8717e992-4ea7-4908-b209-3bbf4f072183", "sighting--73a83fa1-5d69-4ee1-883b-8b0e4d14ca0b", "sighting--fed6f42a-957b-4729-ab3f-c6e0d8fbca99", "sighting--17fc648c-fd12-4904-8804-72c0e51518f6", "sighting--d1e89427-5c89-45e1-97bd-32e0a0fd8198", "sighting--6c80985a-1dbf-4d49-9765-f8af6d4c67a8", "sighting--3d927e73-7bdb-4687-bec1-164e1e7f2e55", "sighting--51b6acb8-6f5f-4e62-ba26-59f73ff0b087", "sighting--bd6afa38-b487-4656-90aa-256d802a3690", "sighting--ccbf63a6-7ac3-4606-9888-0ff5a0b7cbe4", "sighting--c1455c97-c8b5-445f-b32d-e1d6d0a0dad1", "sighting--216f015c-6aef-4c74-8e1a-09cc0b338d90", "sighting--895963f3-0540-45d6-8e0d-c39c507758ef", "sighting--15a23f5f-95b1-4e55-93f0-ac5f122fa16f", "sighting--5fe08670-a512-404d-9998-4b94cc517e85", "sighting--1c7a9140-18be-4a9c-9a36-5779978f5fed", "sighting--88f97aab-5c47-4138-ad56-aa6b1ce27d3b", "sighting--706c2cf1-a6d4-453d-9136-83ea4cbc7551", "sighting--9988101b-5241-48da-8164-6b2f89066631", "sighting--6a0016a1-0ba6-45ee-a862-65aa6eede240", "sighting--a4dd88b5-56f5-480a-b5a5-15dba5ef9b56", "sighting--b6c14dfb-80bf-466f-9b82-f16344a487a4", "sighting--bf51a442-5327-448f-834e-b25e9af6b5ee", "sighting--8855dfb9-4a22-44d9-beaf-06748c8c7140", "sighting--842a2244-c72c-443f-92a6-c785a4f4e1e6", "sighting--72061510-11fc-42bf-a71e-fb21a1180479", "sighting--242eddc0-ab13-42e0-b837-ebd906947af1", "sighting--7b875715-2510-469a-a7e9-0c9e17025c4e", "sighting--6aef3a24-f48a-4e2a-a0c0-67adb38933d6", "sighting--25db9ab0-d919-4894-8b66-bb17dc6b15f8", "sighting--ad59e6f0-25e6-4124-856c-6f47f659e931", "sighting--14cdff3d-7489-46ae-b652-22f5c4f7f84a", "sighting--c7a3bf6b-f637-4196-9477-018e68979977", "sighting--1b2bb40f-abee-4356-b55c-f171b907bc6f", "sighting--ccaa2dce-741d-4ae0-b818-667ed3a247b7", "sighting--ba686e07-a7d8-42d5-b6dd-4e1c5675c727", "sighting--d45cfde1-a8c6-4373-a36f-8554977f4290", "sighting--76518ccc-8ae9-4f40-83eb-176259f3bca2", "sighting--7e09ba0f-6821-4044-8492-39d2e5e00001", "sighting--62ee7250-6921-4bc1-a9ca-5a41fc9b7e8e", "sighting--e5d9e12f-5d05-471b-ad91-e7617477d519", "sighting--d4240c31-84ca-40a1-a8e8-8bd3eec5733f", "sighting--7f2cc1f0-0ab3-4ec4-9751-f7d9b16aa88d", "sighting--14067cd3-58d0-41e3-ae08-90bcf551e5ec", "sighting--1cf930cd-da35-480a-9729-b2299eadf4c5", "sighting--85b9680a-5c9e-4082-a082-d40237bf08b5", "sighting--f18b981a-e82c-449b-b9ce-ee72e93ec967", "sighting--9cc818ea-12a8-416a-ae65-25b15b54e0af", "sighting--c270ebc5-0c52-45fc-917a-4d20d94eb040", "sighting--de1afab6-ff2b-4be8-bac0-c85f3e2dbdaf", "sighting--751db010-9276-44a7-828b-1b207820d4a3", "sighting--b844846a-6748-446f-8d1a-22bfc1751a44", "sighting--72c86215-3d08-48d5-aa92-f41cd5c7aa1c", "sighting--56d9d625-2e09-4400-87e9-78e2057b4f3f", "sighting--a027f51f-46d7-4023-a045-ec530261c156", "sighting--61e58f03-d33a-4463-a2b9-2afa638484cb", "sighting--14c3268f-40a6-4824-b6f2-2640e2b643fd", "sighting--dc33cf58-d83c-4e81-ac0c-af1ee0ff6f6f", "sighting--d34306a9-c5ae-4d01-972c-deaae9389a51", "sighting--307a96ee-f461-4694-83d5-b6e07f203ee4", "sighting--d0f2cf76-45c4-46ae-93dd-98626efdc37c", "sighting--e37088d1-20bc-4c3e-aaef-849f471e9ab1", "sighting--161b4d87-f91d-4db6-922e-32b2d8a0f886", "sighting--40bf2388-2a36-4133-8cf7-cf21d69254df", "sighting--ab327080-83b8-42ef-962e-9c116f0d4c5e", "sighting--74c8c9bb-956d-49cc-8d08-9eaae694858b", "sighting--ba27a517-1470-47f8-a6d8-b520e76389d5", "sighting--c2dd6726-fa68-4c5e-bf85-24184e2f9803", "sighting--0ee965d4-2e55-4e6c-b0c0-de3c5f7a5afc", "sighting--a6d64a26-bc2c-48de-97dd-b9f20706f5ef", "sighting--a8117a58-7a6b-42c5-8198-56d6d035dd70", "sighting--527859b0-326b-430c-af8c-d4effa5ef5e0", "sighting--9627b4d4-688e-4365-a333-5fbb04d0f5e4", "sighting--ef0e0ae9-560e-4c6c-8c06-6c5857ae91d8", "sighting--c2f37155-5be0-411b-8f7a-07f46b1e87c5", "sighting--32c83338-acfd-4eaa-ab48-835ebaa5b93d", "sighting--2ee77cd8-08a6-4f34-a4f4-dbbb797c70dd", "sighting--eb9956a4-6b10-40a5-88fa-63febbe69ab1", "sighting--9679e16c-b331-4a6d-93d1-f5491b64dd16", "sighting--43d524b6-f93d-4407-84fb-d2dc7cfee83e", "sighting--96638fd2-77f5-4185-a928-7e954284da88", "sighting--0d2c3938-bdb9-41cc-a880-7798e3f4b985", "sighting--9c1894e1-5994-4217-9206-e58a33052f8c", "sighting--8115072f-94c7-437b-bf45-6acdd21df82a", "sighting--95f5cfc5-c832-43b7-b788-419ddf08d5f2", "sighting--ef9c1cbb-c1f7-4ca3-8033-f447d3333852", "sighting--06b97fef-7fc1-418f-b5bf-920789102fd9", "sighting--651c8e93-abdd-4bc8-84f5-6d17acc52912", "sighting--36e20257-8b1c-4bd8-b355-f1bed346a02f", "sighting--d987c131-b3b0-4e0a-ada5-d9818866b255", "sighting--e5eb7f2f-e25a-4ff2-b9e2-1d91591ea143", "sighting--0b321a5c-5f74-4e94-804d-f172b32affc5", "sighting--7ffc1bc3-eb1c-42c8-9cee-d9730e76249e", "sighting--1a373782-dd69-437b-a4c9-9e137b3f5a65", "sighting--5cd22566-43f6-4958-9936-ee7cb49d61af", "sighting--ca1aa11a-1432-46ac-bd0e-56f821e887b4", "sighting--43b8bbf8-428a-45b7-8a35-99179340c24f", "sighting--ba3bd2b8-cc4e-4ee8-b94f-d686ae90647f", "sighting--36d30bbf-1e87-4437-9112-dacb95661a4d", "sighting--1434440c-4942-4767-9991-d956cc8b35b1", "sighting--c744d889-c73e-4b7f-a2dd-8c96d06af741", "sighting--d5c71adf-5dea-4ba5-9533-7ab6157499db", "sighting--4d6b76d3-07c6-42ca-9482-1dcf032534d4", "sighting--c02c95ff-d98b-4d0a-ab27-6ea4119b39f4", "sighting--9d3674db-e2fd-428c-a29e-5fdad5f6f329", "sighting--36d77336-05e3-404d-ac30-25780bd2e474", "sighting--bcaf7d1f-e375-41b9-9e97-a90d2c99d31f", "sighting--d29c2898-0049-4114-8ba4-57fbef9cdd13", "sighting--470b6b6a-8d8f-4259-b2d5-f1b201ca8461", "sighting--efcaac8f-853a-40d0-8ecc-bb8edea708b1", "sighting--bdee0ab1-b74c-457a-90a8-fd74bb981b80", "sighting--4ae98bac-9332-4a92-9656-800fed7a6615", "sighting--c2a384fa-a78c-42ac-939b-20f4ffa35eea", "sighting--11e234e7-582a-4673-b9c4-09e7b4d4d7b3", "sighting--67eb8728-7250-4910-9ff4-b54568ab8bf1", "sighting--c25dfa12-c2b9-4af1-a59a-0664c96f8d05", "sighting--55cd7ad6-bacd-4336-84f8-68b9c5fdacb5", "sighting--53ef7c48-e597-4e60-8c55-f72fa0b1e913", "sighting--455fd9bb-1ecf-460b-a8cc-c70d129338c4", "sighting--cac31b3f-e993-4728-b778-346ccabfc50d", "sighting--348812f6-d848-4e59-ae86-182656fcfa4c", "sighting--b162ddcd-77a4-4423-8c08-62da2f257cfc", "sighting--4a4ec3e6-9c2a-4551-bb98-2b328a1331a5", "sighting--97bacde6-a80f-40fd-8f68-89b93cdff915", "sighting--70fb012e-bbc9-45ac-832f-d9e6e0ce9b8d", "sighting--b839aca6-7c9c-49d2-a6bf-b096ecd47efd", "sighting--dc9c6dda-e4bf-498c-a964-e12227f062ba", "sighting--6f1403d0-2535-48ed-8a16-9791a9b10d63", "sighting--8f303a3d-2d16-479c-a56d-6903c693c3c5", "sighting--42920fb6-7a4c-4c7b-9bcb-6b58bacee5c2", "sighting--eb221035-7c25-448f-b32b-0a9dfac6825d", "sighting--f1f9fd6e-3f5f-4d50-b654-7dafeee7bdee", "sighting--6917375a-1c55-431e-9842-0ee8e350ae3e", "sighting--e740bd97-03a0-401b-a2ab-a0783c597717", "sighting--cadafcb7-3dbf-4e24-9648-d7acccea0d0e", "sighting--702a5933-bd59-41b1-a461-eb0c274eef3e", "sighting--74d30653-1505-4b74-a0d7-29c6db79f34b", "sighting--0c4cf4ce-10cd-4c22-9722-7c0c40179137", "sighting--779ab0a2-dee1-4714-b721-971d5f99d197", "sighting--87ab5b33-200d-4951-8854-bd79685275d4", "sighting--a709cb47-7582-4105-bd89-834027c6c73b", "sighting--2283f07b-e0ff-46c0-858f-08dafca31872", "sighting--0f1c93c9-b7e0-4927-914e-7fbb66e3b3ee", "sighting--172b2dc5-2b57-4602-b8f5-2eb22d1e1b1e", "sighting--bc8a0921-ba72-45c1-9271-2d12eb4d7368", "sighting--31e48012-132d-4792-a087-02aa9e0cdca1", "sighting--dcbbbda3-79cf-496c-b524-52caf9fe69ca", "sighting--dc1d1dfe-bfdb-4269-aecd-716b01009b0c", "sighting--85a9a5d6-4c9c-4305-9f11-c5ac6c7f2980", "sighting--4d44a11d-a0c9-4ff8-8f68-909ebcf71520", "sighting--b2780b56-11c0-443a-b3c9-54bdb08b9dc1", "sighting--3f50a163-759c-472a-b990-17a976551be8", "sighting--b45d399c-d6ce-43d3-8d26-7c62fcef1ef5", "sighting--8b0c2d60-c48b-44e8-9807-4b9e383bd3f2", "sighting--594ad2af-5dd3-4dd6-afd5-8a77c82348dd", "sighting--21b4a319-086f-4a0e-9784-1e2f374c1ec1", "sighting--0167bed6-6bcd-4978-a5bd-97488e37ac77", "sighting--d4ad2dd7-1829-45d5-9b59-5341a783d042", "sighting--c89a8514-c439-4aae-b8d3-5ebeec7af9dd", "sighting--acb4f8e8-7ad3-4aa4-ba26-19b1401672af", "sighting--99f20ebe-6497-48cc-b549-5051f4770b83", "sighting--89aa3a9b-7283-4abb-abfc-a2e102e48841", "sighting--1b02678f-b572-4b69-ad5a-d10dbfbe769a", "sighting--5946264e-3e70-4560-95d7-b5021bb12729", "sighting--79bfb057-4a5d-499a-95fa-3ca25a22f8b7", "sighting--b75b39e1-59d4-4506-87a2-565d18e2abd7", "sighting--abd4a980-444d-4ad1-bf9d-f57d1a99b8a5", "sighting--0a0cfd1f-beef-45f6-b72b-d8b88f8b0722", "sighting--5eb2429e-3204-4898-8d9a-38707b5635ba", "sighting--b3401c61-fa24-46dd-8caf-b55d6f4141a5", "sighting--ecb5f4c2-314e-4f74-afa6-b26d131136da", "sighting--00ea16ac-e2e0-4d6a-bb16-f34f663b882f", "sighting--461adfbd-996d-4b53-8b71-f637f2dde98a", "sighting--56a2ebb2-9866-446f-bdb4-ae4433cf7724", "sighting--d516bbb5-b92f-4a74-82f5-deb1f954925a", "sighting--cbfecb36-a201-43d4-aa49-b72c5b138cc5", "sighting--5b0fe7e0-f1e1-4b05-8432-08db6e5be7fd", "sighting--8e98173d-bc9c-4e78-97dc-374776657fcb", "sighting--880446a3-46c2-413e-926e-29b85628c222", "sighting--269566a5-ca53-42b1-9293-55602a77a20f", "sighting--eab752fa-b0a8-4e35-82e0-cd8f00b93393", "sighting--28228625-ab6b-4b55-bfc2-e045da7992ff", "sighting--6766671e-d277-484c-a10f-2b459dfb6895", "sighting--c27540be-ae13-4644-8979-cabb3720d161", "sighting--19c33be3-8e65-4fea-8f2b-1649b0af09e6", "sighting--f4c4bd5d-168b-4f74-87e3-b2cd1da62882", "sighting--09ab0451-179b-47a2-9b2f-74488d7316a3", "sighting--0dae1eca-1a56-4ae7-8f81-292aabf2a4c4", "sighting--01bdc7fa-6d55-4ea6-9596-54ac137fbf44", "sighting--06ddae40-1503-4625-9a57-24bb4a0989b7", "sighting--64ee12e6-621e-4e1e-8f11-3c92362f4f1e", "sighting--e26d5da2-45a3-4dd0-89ad-d1605ea09419", "sighting--ece805af-3481-49a9-8289-3f83ae644d63", "sighting--ce0dd40c-375d-4821-a410-15cdb77f87ea", "sighting--8c58e8c0-061c-4f9c-a4bd-da5fe0919bd2", "sighting--01a1bb9c-1374-4323-bc75-69b22bcaa020", "sighting--62a658d6-1f9a-45ed-b749-54e009072d4f", "sighting--eb6fc061-823c-4c78-a2fc-26bd0a23724c", "sighting--3a9f8a9e-060d-4cee-868f-49b1acba7dab", "sighting--c165ac29-0ebd-417a-8e4e-1b3a5ec8ac72", "sighting--b6736085-ea47-42db-b4c9-d4ba03de9304", "sighting--66a0d083-5619-49b0-8e54-a9feb8c10013", "sighting--0edfea93-cc33-40f1-ad5b-1c7b2f1c67e1", "sighting--44911f85-b73a-43ce-a2b2-36351a609733", "sighting--77b9ac6f-3d44-41d7-8da8-2c87b7c66399", "sighting--8349b946-1497-46f0-a162-8f1697b97d10", "sighting--c37539b2-0859-4c0d-aa35-abc36af08652", "sighting--ff694cc6-c004-4247-a52f-a758b8791a62", "sighting--e9f5a778-440a-43fb-a8b3-d22d9b0b276f", "sighting--b4ff6d92-c22a-4110-9f1a-1ffff2dea754", "sighting--846b50c2-3b55-4856-9ae7-78e564f2b6b4", "sighting--095d66a2-6825-4ddf-afea-a11e3c46eea5", "sighting--eec4fdc2-ab05-4afb-8f2a-78d2d8688eaf", "sighting--e1eab344-627f-4518-afd6-560da7c355ae", "sighting--deefedaa-6360-4437-b34a-5b826f455a72", "sighting--f4ca6caa-691e-4cd5-baeb-804b3a424119", "sighting--6915f1ad-0172-42b7-a0f3-cf1232404e92", "sighting--24f3966c-608e-4cf2-8bd0-5e31644cb516", "sighting--23e55a91-b0e9-46ce-a640-68afaf61c038", "sighting--d9701fe9-99be-46d5-9599-16e7e670ace1", "sighting--6e862a91-15f1-4648-b8c2-49b0a8cbf9f0", "sighting--df66d3ab-f85d-4cca-90cb-6c889d4225ce", "sighting--6eb44311-3125-43cf-829a-ca8edf009954", "sighting--ab795157-943a-47f9-8355-6c35dedabc1b", "sighting--96f3a248-8c1f-4fb0-8447-6154b3b7980f", "sighting--954445ef-2ca6-4d27-b263-931cf80a6a26", "sighting--20af7bed-2d1a-489f-a9d2-8eca698a7e68", "sighting--19fdf104-eac7-4e27-8880-1536f655b99f", "sighting--eb7a9151-9527-44a2-9e90-69e9c520c187", "sighting--098c6b00-727c-4c0b-a840-796a7a22ce30", "sighting--fd69e9f6-ea4e-436c-a84f-91a8e9c79907", "sighting--6a9db2c8-a96f-4de3-8064-16692692c042", "sighting--501cfff5-24ec-461e-bcb7-8c480d387baa", "sighting--0330b769-0fc4-4e3d-bd1f-12200a00a979", "sighting--ac070c74-c1cc-461b-b20f-e831313a392e", "sighting--1233b528-a5bd-40e1-9895-62ae4fdc8832", "sighting--e34599ec-4362-492e-8cd2-1f084e83ff0e", "sighting--6e4ae871-75b4-4eb4-9790-2e4af9e1c2c5", "sighting--ed1c4893-4e29-4d51-b87e-ba7b9e6d22a8", "sighting--1f197a32-9c52-4ce9-9be0-680088c43622", "sighting--899dcd92-d819-4df4-925c-4cfa846208de", "sighting--5b3f53ef-6a11-4d30-8a4d-46fb60472db3", "sighting--d34737bb-af58-4105-8e4f-92be8c70e2ee", "sighting--6a924cd5-138b-427d-8558-9a861fec46c9", "sighting--449e5bba-28f1-4994-8f57-ad608d1d68b2", "sighting--c58fd3dc-6a08-47b3-98d9-48e9d00654d7", "sighting--42b72660-986b-45f4-8aef-ece0636fb5e7", "sighting--a9e97338-40c7-4fee-93d6-257eac4fe8f0", "sighting--12eac893-45cf-4906-bd55-0c6925ded8d1", "sighting--5d7feae0-ba58-43d1-9792-0450b2fa73f6", "sighting--286a650e-4633-4fbe-b00d-7e96b97a4b6e", "sighting--4efb8d64-8551-4e64-aed6-a89d808f97c0", "sighting--43af3be6-67e0-4b42-b16b-4a927f7932fc", "sighting--3b48ea51-dd6d-498a-ad62-ca19c9530d31", "sighting--c56e5651-133e-42b9-95e4-5870ac1ecfb5", "sighting--f711c677-d286-41fb-b16c-2f024844cc87", "sighting--83650671-407d-4f38-a4b9-4aaf9f0baa69", "sighting--da73c30a-eaf8-4c9f-95d3-811115086a32", "sighting--1a49e79b-8469-44ce-a0ec-dce32c2179c7", "sighting--2d4b2bab-27e8-413c-bc73-89404905d6e0", "sighting--8ac58c8d-ab7f-42ae-a2fa-baca0a0d6e32", "sighting--c78082bb-6c24-4d5a-956b-b96aa5a0204c", "sighting--1bc99050-13be-4ead-8251-26d7909bcebb", "sighting--0ccecbf5-9f4c-461f-96be-3b8aa5d97ef2", "sighting--9664ba94-5400-40da-9ae7-92b2e322d339", "sighting--fa3d5367-96df-4a9b-9038-084358ad128d", "sighting--e2297a9c-8bce-4082-a7f6-3456da0fe117", "sighting--7edb9369-b77b-4316-be28-f0c98a335f8c", "sighting--ebae4fb5-7b3d-458a-9e66-5997de13d2a4", "sighting--bed3ca3b-070a-464e-8b1c-b5e4e2521b01", "sighting--a727e29b-231c-441a-97b6-f68ce2e2b51b", "sighting--5caff61e-3eb6-430a-81c4-7c862cf38210", "sighting--066ab975-ef8c-4de3-bdbd-0702802d9d4b", "sighting--b3b179b5-c56f-4f8f-99e3-7c983920c633", "sighting--41950cdf-7920-4fbe-a158-381764b8ea91", "sighting--27764a98-c075-4588-817a-f7d9f0abb22a", "sighting--572a53c6-c6d7-4810-a1b2-a423bc0db6e0", "sighting--e97d74fa-2f22-4d35-9ae4-7ad359e7308b", "sighting--d20f78bd-5d10-4a96-a14d-fd4f04c96580", "sighting--30f5a5f1-e7ef-45b6-9cd2-bd37d7a9cb47", "sighting--ec61a0d2-a2d0-4c20-a85b-bdae209c3509", "sighting--49a0ccb3-0fe8-4f2f-b5e3-80a3bbea4ba2", "sighting--9e6e4e86-98e7-42c3-b600-d7f152a837cb", "sighting--c6453569-1589-47f2-a55d-224c43a86796", "sighting--13e858f9-d03f-41f9-844e-5a1a5a385e60", "sighting--10ca062e-1959-4e36-b827-602e58552560", "sighting--9c9b3c85-ff82-46fc-9b5c-eb41677b7041", "sighting--4021f7e2-b63b-4d37-90ca-21424522a8fc", "sighting--77517f39-f883-43c3-acf6-ba9e4d93d882", "sighting--f379a020-45e1-4fd2-bd9a-a2d862f085a6", "sighting--fd61f0af-3193-41ba-8626-6749ec57bb2b", "sighting--c6885301-4bdc-448f-a16d-5fb4462711e9", "sighting--c06a322f-3da6-4476-88b3-aef7c9a0992b", "sighting--b82316c2-d658-43df-93c3-c9034a12d60c", "sighting--ae7c7a62-e910-46ab-978e-575092468eec", "sighting--795243c2-13ab-490b-bfae-1a8eaf877621", "sighting--76734f6e-69db-4604-95b1-38dc3e8c744b", "sighting--0f67199a-9370-4c17-b87b-6fc06c561af1", "sighting--c8c0bd50-d872-4944-8c96-408a4a36fbb7", "sighting--fdbf991e-e6cc-469b-9d9b-490cce3b4bc9", "sighting--e21fa3a3-0d13-49e4-88e1-0afb497e86e3", "sighting--970730cc-09a8-4351-bb49-a9c411a0f96d", "sighting--4fa03961-1af6-4688-a030-c3bf65e17ae1", "sighting--5574afc4-e2d0-4d7c-9f76-f2f05c6c0c4d", "sighting--e833064d-fe38-4e63-9a7a-1105e7bea6c8", "sighting--4b8a2254-3ac6-4c75-9d64-1fb403cb6da8", "sighting--4e9a8451-e068-45bd-a459-850a4a753bbb", "sighting--bae573ea-339b-4e29-a1d4-e12cd9d55c90", "sighting--87dc76aa-d53a-4c4b-856b-5638cf16752d", "sighting--594fc0ca-ed83-46c8-9f08-1c57a88b6a87", "sighting--e610bc48-4041-4f77-8ab2-557ebb05a9ae", "sighting--549c768e-3828-40cc-b179-88e648415c63", "sighting--526130dd-d58e-4040-968f-61d92fa6846d", "sighting--04fe32ad-1633-43ff-8dd0-00388750aa5b", "sighting--b2bc509c-6d72-4848-b350-68789776c768", "sighting--b9d83757-27d5-4b60-bca6-d5bc36eb2e09", "sighting--bfbfa4b1-30d9-481b-b9cb-d716e855f712", "sighting--d17fb5cb-9280-4d43-82d5-f6a92266d13b", "sighting--a799b822-a3ff-440b-acb0-86bbe6c788e3", "sighting--de03f92b-c6b1-40dc-83fd-3cbce66f9395", "sighting--e39dee54-a9d2-4180-ae7f-e9302d9460d9", "sighting--2a8de549-2239-4fe8-a209-8e2feeb6500d", "sighting--e3759e3e-c27a-4f94-8c9f-f470f96b6cac", "sighting--a0d27e13-68b9-48a3-9056-b47e33a83592", "sighting--15abbfda-756a-4f2a-a034-8b13aeddc5df", "sighting--3b12a30b-0e3b-4e7b-88ea-f3fa01505679", "sighting--2735d55b-8827-4f11-a01e-3cc98dbf9a25", "sighting--b21bdd52-77dd-4019-a16e-d82b1d2fd935", "sighting--cd818f49-bcfe-4342-9c73-1db472b5589c", "sighting--1c5e55b3-9972-45e1-bea9-76f554b5acad", "sighting--4e42910e-6739-4632-8f1a-d3d4a65d9b05", "sighting--5a8a3fc3-b51a-403a-a9d1-4b76f3675f11", "sighting--12af720a-01a3-46de-b03d-906b5f41563f", "sighting--a1b54ede-cd2c-4e21-b890-e3f7ccd46797", "sighting--e454b675-9b33-4233-b3a7-1b0836dc8382", "sighting--6b8b24a5-2d6e-4990-89f8-6cc456fe7945", "sighting--6af89b4f-8e42-424a-a5c3-0e3e197784f1", "sighting--31a22736-224d-4272-99f0-a3bad548aefc", "sighting--add1ce67-6ae1-418e-af3a-bb529761813f", "sighting--c127a15e-fc6e-436a-a169-cbfa2dff11fe", "sighting--761af3a7-8eaa-4750-987c-a8478fcbe1f3", "sighting--3dd212d2-5ec2-4678-b33f-8a80d2750b37", "sighting--326ceed8-b699-4e32-9692-032a02b08761", "sighting--1e81d15f-4967-48e4-8c0f-e65d868f6d39", "sighting--8b0337b1-b73f-4240-a2cc-e009ae0dee86", "sighting--42a711b4-89e8-4037-bc19-18c82a1bc328", "sighting--9e380328-0da5-4624-9fec-8a72bf8f4f47", "sighting--5d91a032-27bb-49d8-bb5c-767832fdc7c5", "sighting--e6660b79-3b95-4360-ac3f-bf30020890db", "sighting--7a87dba6-4927-462b-b623-6b3de3052de2", "sighting--0acf842e-4dcf-4cb4-9654-e979cec97aa6", "sighting--32ace61e-a83f-4eb1-9b8c-1f4052688f47", "sighting--3dada1fb-2b91-47c9-970d-c455c894fdce", "sighting--b02f5a8c-c20b-4b71-9c38-f89f5cf9c399", "sighting--a7cecefc-e83a-4a50-a6a7-9e5ac6d5e217", "sighting--dc38e9cc-9f16-411e-a68e-cb1175b05dc6", "sighting--01b398e3-aec3-4742-bfe5-493382487bde", "sighting--319c277e-0491-4fd6-85ca-aca39b950b17", "sighting--d778ae1c-9173-4fb9-8dac-93797bd4cfc6", "sighting--b7dfea67-e2c3-4544-ae85-628ba4d815a5", "sighting--15716705-3e9f-4608-9ed6-9ede1c09c71a", "sighting--83ccf374-8a93-4959-8481-4566e1454826", "sighting--0757d2a1-a9ef-4520-b9e1-559ec4ee8a24", "sighting--007d43a5-042f-47a2-b0cc-0e008e18dff1", "sighting--3a8b56cc-a852-4c81-8867-8cb42618cecd", "sighting--57bdcd2a-b2a0-42e3-8266-8e6b51588b49", "sighting--120a9cff-2710-4ea0-98a3-4438de935787", "sighting--5367a566-34ec-49d9-b306-2781f14a65d9", "sighting--51c41db7-e568-4bdc-9af2-641546d7eb77", "sighting--a929a115-7b2a-4a48-a6d1-39047fc31fc2", "sighting--c6823698-38b0-4615-adff-161b843815f1", "sighting--03c4734e-aee1-44b1-af44-3cc9cba2cf71", "sighting--573b1631-c47a-4a78-93e9-e53dd9c6f944", "sighting--3c1c2bfd-0450-40ac-8a4b-5d2be8b6948b", "sighting--b440561d-f686-4316-82dd-6952e060e1e2", "sighting--272ad461-8a7c-4e4d-95da-99b2c94e0af0", "sighting--1085e2d2-1bdd-44bf-a318-5d04c3b980dc", "sighting--efa1128c-23c6-448d-8426-fc323ba44ce0", "sighting--dc0d3976-d182-4db0-abbb-5abbe1bfb717", "sighting--a8342a79-80d1-4a81-9a57-487e94b5ee2a", "sighting--205fa1b0-f9e3-4cb1-87d5-f9e42ce56144", "sighting--4d3424e8-4efa-48c8-878c-bacb09d28cc4", "sighting--977d82a8-8e76-4633-afcd-4c17513bad1a", "sighting--4d77c108-2ebb-4a9b-860e-85836ad33104", "sighting--bf02b220-194a-48e8-a560-1d457c0c6afc", "sighting--0906a3b7-d20c-42bb-8f74-dbd7d4d2677b", "sighting--5bdfbe64-a74a-4849-86eb-f6c37c5ad886", "sighting--4aa5af77-df12-4a30-8dcc-cab36076ffc2", "sighting--80adca07-21b5-4162-9549-95e44bb7f31e", "sighting--44fd0818-e492-4f04-b4d3-dab17f4c3bd7", "sighting--a3ca7880-65b5-4abf-b608-f379e3856923", "sighting--eae2724b-b751-4b9a-9c0b-38efb5a07161", "sighting--f02be0ef-bf90-4a08-a2f2-cc7ca5545569", "sighting--2a03fc29-890d-4189-ac47-f57f0cbf979a", "sighting--b5f35ff8-4a17-46db-af06-2f09b2fc6698", "sighting--e728929d-c750-4328-9cbd-026e2eeaf7f4", "sighting--0eda4eee-be10-4fab-b586-f48ae76a4d4c", "sighting--6fe18219-4956-438f-bb54-2532532a868c", "sighting--b2652262-80d5-4f12-ade5-59b8c229402f", "sighting--010b27b1-7d5a-4875-95d5-fc715140fd5d", "sighting--63dfdd31-4fd9-4df1-9a95-ad59c47e3b42", "sighting--90973588-bfd2-4ac7-b717-c32a0f39a33b", "sighting--f46fe4e4-f36c-4721-9069-308def7f83ee", "sighting--51b3f2ba-d37a-4b0c-a194-e6c7d7b35ee6", "sighting--71690e4a-cae8-44be-ac3f-6c7fbe16665f", "sighting--ddff8f5c-9ac3-424e-8d74-dbfcda119e71", "sighting--79ba789f-75b1-4085-813a-616e6f831989", "sighting--7e3c3a31-b538-4aca-9dfc-5a331a28b7b8", "sighting--dd5ac275-0c17-42e9-98c9-6919fe260c2f", "sighting--53bc2518-3b80-4467-8829-da77689c2530", "sighting--9e502328-c90c-43c5-8299-c7b6ea04cab1", "sighting--90e397d7-7e32-41bd-8f34-d64ea719d1d8", "sighting--76283330-5f58-4406-9821-91ea4f67cd4a", "sighting--28961294-bb54-4e4f-ad80-bf0c23f12fcf", "sighting--6be70bd6-f027-402a-a991-2979cf86cab7", "sighting--40ef2757-061c-49a8-bc41-9d3ea9e0ad69", "sighting--ad137c18-4415-4ed4-9e32-6d0c3ea90ba6", "sighting--9df563b0-0233-4d0f-90b8-9b0718187b58", "sighting--296529ee-7eee-4afe-8ddc-574bee0af9df", "sighting--74c7f161-a2d5-4a41-83a6-0c73f11667af", "sighting--34f280c2-5ba4-4bb7-b4d4-985261054770", "sighting--64c6e10a-9f73-4dcb-8df5-53d3445121ad", "sighting--93dabe39-9344-46e1-90e7-b5bca61978ea", "sighting--1dd682ce-05b0-4d53-8d5b-e517eac2922a", "sighting--b6a7fe2c-3343-4a72-ad3a-61fab12d35c1", "sighting--513783d7-8b25-4670-b2e4-278f80fbadd9", "sighting--798dce6b-0032-4e7e-90a8-2ca3a67d7d24", "sighting--64c9deed-578f-4988-9ac5-53c246b35926", "sighting--c630ae0a-146d-40ae-b81a-f39483ce8412", "sighting--c917d6cc-c9c7-43a6-bc8d-8066dc9b1266", "sighting--f7f67335-4c3f-4677-8238-df874cf4d042", "sighting--ae40abc4-8fa2-417e-ad81-06f49d8d96b7", "sighting--6efac8fb-20fe-468e-8ed6-3d143a2078b6", "sighting--0968e38f-23ab-4ffd-ad1a-2b29d962828d", "sighting--6fa68de0-67ff-43da-9ee8-ea8a163defc2", "sighting--248f4ba2-e2ea-49f9-9f3b-eaa726f13c37", "sighting--c23fc605-2602-4d21-83d2-d1767acee31e", "sighting--046e8e74-6ab0-4b08-9e16-f626fe5f7d75", "sighting--fc3012fc-d0b5-4b4b-98f8-bdff060c2893", "sighting--ab111259-8e87-4a64-9970-e5b02c754696", "sighting--151bea8e-6a98-465e-b278-97e451f5f9ec", "sighting--a9bcb22f-c5a6-42f2-a674-3b7b744df1a7", "sighting--9f7199ec-2729-428c-a9e0-8f15047bb596", "sighting--6c9dd9ed-0114-4701-aca8-bbd9d9070458", "sighting--5511dac3-6de8-464a-a028-de1664a282cf", "sighting--0959d755-dda7-43cc-bc65-12f68ab5ce3a", "sighting--0176669c-48ab-4cb8-95da-88f7235a7c0f", "sighting--059f04da-387f-45b2-88fa-ad3e7d1f6e45", "sighting--c35b7772-f038-4d80-af93-bfc2e3dddfeb", "sighting--3e9cc2b6-f4eb-4413-b225-9f79b4c68743", "sighting--9c871a58-0c61-4b5a-bd54-6739b17e8f69", "sighting--c2b6b9ad-1194-43f5-8a78-76d7e156557c", "sighting--27d11ab3-56a9-4ec9-b8eb-7eca98586942", "sighting--a4d2c84d-c11f-4cfd-b7c6-48de20dfbce5", "sighting--547a94c7-1383-4b91-b9b5-981a0396cde2", "sighting--c60afea4-2e3b-4442-b26e-5c3388dac788", "sighting--55343585-c4bb-413d-920f-ac4253b38839", "sighting--8d540bad-f3a8-492b-b588-06adc305845f", "sighting--73eca399-5965-4676-b28a-523896755455", "sighting--f9502a06-957d-473d-a300-17736cbe7a34", "sighting--26d20727-9f59-4d05-a272-463d1396526b", "sighting--485ac4c9-913e-44a0-817e-1b77063762a5", "sighting--2dec103c-f445-4ae3-ae6a-85965f42112e", "sighting--ab0e8f29-a0e7-4ae6-b254-c52f4825696e", "sighting--d2e554b4-1387-4982-8a67-c7a77ccde11e", "sighting--4fe75b20-4542-4472-9261-7e1d5a99a381", "sighting--5e0f29e3-b853-4717-a6ca-55650cd7f398", "sighting--a673911b-7e3f-4fcc-9e44-97ab3295fcd5", "sighting--1891e66e-56ac-408f-8a05-3a6af9c245d0", "sighting--5e36dd7a-6a2f-435f-878b-db154a7cef94", "sighting--476536d8-0e9f-4013-bf65-b86905830ca2", "sighting--ab92ebc4-067d-415f-b7de-48f0ee798432", "sighting--76b33a60-e1da-4233-8a06-a8a098c27ef5", "sighting--8ccb46bd-e1ae-42a8-b9f9-ab8e2f4e13ce", "sighting--077117d7-0ed0-4fd4-a84a-14b28e2437ff", "sighting--d5105fa2-adf8-405a-816a-4b578f524d27", "sighting--99732d68-528b-4999-acf5-63e0055b508e", "sighting--102cb247-9875-464b-a806-a492df5d2df8", "sighting--479285c2-de6a-4fb0-807f-13e9fdcb9e86", "sighting--6e28e63c-1c3b-40d6-80a2-beec3148bdf8", "sighting--9e6a2778-768a-4a46-97fb-495517b279c1", "sighting--8c3d0fbe-01a4-4bee-9215-dad12cfa4d4f", "sighting--25287b4d-f194-49bc-bb6c-8b7f1e1bd488", "sighting--1df3b3dc-9d55-47ee-887e-dcdeffa728c3", "sighting--0e9633e5-b0fa-4f9b-adde-939efb04c39a", "sighting--72066415-2536-4106-9048-7f32623b240a", "sighting--6a676be3-f3c4-4e7a-b8b3-f103035af58b", "sighting--34bde13c-2646-4a2e-807a-3c8c8ac8815c", "sighting--7a792f87-4a9b-4fc1-bcbd-acc902f13b85", "sighting--8eb673f8-4777-4278-8462-1ec71e13ac25", "sighting--e212124c-c849-489b-be32-3444478a3a35", "sighting--733bfa7c-c319-4e03-b8aa-878f6668f829", "sighting--2463c5da-c4e4-45a2-a302-f91d1402521e", "sighting--f8dad115-e19c-44bb-9ba2-df46d1a075e0", "sighting--5cf6867b-4b16-4381-97df-763c8fb9bc6b", "sighting--a615ffbc-68a3-47bb-bd00-46048841922c", "sighting--c4368422-7e4e-4cc0-a0a4-ff2c87050880", "sighting--3f76a08a-7ace-40d8-8179-bec57cda5a9b", "sighting--2429a8d8-577f-414d-83e9-ff7a13534a1d", "sighting--2616cd3d-bc35-4131-936c-7231aa12248a", "sighting--7a284a4e-d6cd-4e09-b0c5-4f6e400e798f", "sighting--9b5819fb-b78d-445b-9b9a-a411a379c9fb", "sighting--9803e229-26d7-4be2-bb78-44ebf54ee4cd", "sighting--456723c4-bc93-471f-8e4c-3d3d0f2fb78c", "sighting--3f1303e8-a34e-459f-94a4-ab2172174836", "sighting--7f1206f8-57ae-4a20-b62e-ee392e34bea5", "sighting--7ed89f63-adaa-44f1-974b-a3b5ed93847e", "sighting--b550178a-b9aa-464c-a872-741c09ee82f7", "sighting--f1f3ecd7-f118-4306-b56e-687233a55fe1", "sighting--8e6f7a17-faca-41ac-b935-f77d65b75a82", "sighting--10bc472e-8f0d-4120-ab98-9b0fc02ea5f2", "sighting--60165051-dc3c-4923-b239-f65fc63418bc", "sighting--f72f0eb2-b71a-42ab-9162-1f700f2151d7", "sighting--8b249978-88ff-4f70-908e-cf29c19e540a", "sighting--579a8a4f-13e9-481e-89b5-72197497b800", "sighting--bcd71bfd-b22c-42df-bd3b-d21929b6bb90", "sighting--184d7687-57f8-49a5-84c1-8b3e4584b1ce", "sighting--8d17ebc5-96de-4d4b-a66a-6fcf31f7f1e2", "sighting--7554bf89-7d79-46c1-8a89-4986b84d72e1", "sighting--8ddb91db-1c73-415c-882d-0ddc46a927e8", "sighting--73d842b5-8ac8-46a5-8656-273b5239f448", "sighting--1bd1c052-3574-42e6-9256-de1d0423a787", "sighting--a830fb92-cf9a-4fc3-a5eb-8dd50f0fadbd", "sighting--720d2c09-c700-438a-9582-9b1e929d6ff0", "sighting--54f65bc8-836b-4b27-bc16-e8f69518db53", "sighting--1d54510e-7d32-4cf2-9151-a6341976eda7", "sighting--246d13ff-7a33-417d-9e48-3bcedd7ccfa5", "sighting--23e74beb-19d7-441e-a0d3-2df4d533a43f", "sighting--21d61b24-1eea-4e52-b1c0-91ba91478057", "sighting--c73efb24-624f-43f3-8ce8-ad96ef2f49d5", "sighting--c9138be7-0fe4-4b59-9fdf-7edb1685c16a", "sighting--e8312272-fe31-4cb9-8700-2a000258d47c", "sighting--5849e0f4-885e-42a2-826f-c050045e61d7", "sighting--baca6bf7-cee5-4acf-86be-2047f567a119", "sighting--b3231a14-e316-4788-9e65-64a2b262be87", "sighting--092569e1-b9a9-48d3-8e8e-0beb1af1b0c6", "sighting--36be8b94-091e-4bc4-82d3-1c5c93405c00", "sighting--a2a63805-d249-4c73-8482-214e151de8d5", "sighting--ec0eaa06-7dbf-4234-8215-ebfea6659245", "sighting--67e7450f-8572-421a-a1f7-17c9fa52283d", "sighting--d841b9f0-7034-4ad0-b9bd-b9ab50769274", "sighting--f94d3325-464b-4c6b-a40c-d4d9fcce167f", "sighting--d7ae9bf9-e3fd-4731-b79f-9fe1bae7b385", "sighting--f63efc1b-be5b-4e6a-8283-7071d808b13c", "sighting--3d0cfa2e-4f72-4f20-89e7-d77166ed3ee2", "sighting--ff8eee5e-fd1f-4f00-82da-bd11eb726561", "sighting--f6ecf4d9-4dcd-4b0f-90f3-0e0ebdecac9a", "sighting--c39e5c8b-c441-4ead-91a9-2ad1bf1e5579", "sighting--2249c43a-cfbe-4d23-a43b-faf0cad8bf89", "sighting--30b70d64-fef2-4030-b6c8-dbe88e18bbc1", "sighting--635286f8-af79-4f73-bf4d-839e5ccaa0b9", "sighting--ab668f7f-53ef-4f65-aa6a-86e226cfa8a4", "sighting--d4499d89-ede1-43b1-81d9-27960bdfa902", "sighting--b18e8551-2461-461b-9b2a-e41e7b0d6704", "sighting--d84df3a4-44a4-4af8-ab47-40016a353728", "sighting--efaf9acd-6e60-4ce2-a69c-07f6fb8f2f3a", "sighting--388f2d8c-bd73-43a0-af44-355fa048ef54", "sighting--3b84e55b-dbda-46d4-8551-59a9a4eeed9c", "sighting--65d01b36-adfd-4b34-aa87-e0e71b37bf83", "sighting--ff0b207c-1ab3-4459-854a-ff616f80ba8b", "sighting--ae8253ba-669d-4bb0-b8c7-73dc5bbade82", "sighting--89636333-ce73-4dbd-bee3-027f9e7d9e06", "sighting--e59a7580-3d19-41ec-a464-b86cdc1c2446", "sighting--cd82b00b-8081-4269-af0a-1957dfce00ca", "sighting--03ac89b6-2a94-4078-95e3-f56635dabdf9", "sighting--640ea7d7-ec35-4b20-8001-af4c11f484df", "sighting--728c7d98-64ab-421f-b720-d0145a844483", "sighting--9be375b4-301e-44ea-9801-9b7c23961666", "sighting--4565681f-0199-48c5-b38f-a74739dd75ad", "sighting--30b0516e-dc75-4f20-8c11-a4ad8a88436a", "sighting--24df2919-872a-4861-89ae-e9e5dbef4b9e", "sighting--298f30e1-249d-4ec9-a52b-9a95d121c256", "sighting--8cd22ac3-026b-4924-87e4-b48c7bc6a770", "sighting--06de8235-a27c-497b-9572-d6bfe276d584", "sighting--d80663d8-44e8-406a-a3b5-4f95ad201167", "sighting--9f42b9c6-a12e-4119-8620-9903daa01564", "sighting--01e7e458-44d6-4d36-98de-4662ce9cd87f", "sighting--878c7522-e39a-462b-8765-85912b080c50", "sighting--354eaf05-f2e1-48d2-a439-ec14e0678464", "sighting--89b9d260-e1ee-4915-b30d-65aa89bd12f7", "sighting--319e2063-6124-49b2-bf97-0b4e6f044d4f", "sighting--03491f17-5053-471e-951e-f91c032903ab", "sighting--0abb1963-5039-44e3-a5b7-e60a255a15ed", "sighting--e764405a-5bb7-4783-b638-9e8da2bfcbb2", "sighting--f84672d0-e885-4bc4-9296-2c6db5fea5c9", "sighting--c54b508c-ced8-4563-b321-27de0dc9f1c4", "sighting--1c6c309f-64ed-45a7-aff4-0acf5be12e8a", "sighting--9771d631-2045-4a1a-a185-fab3ac24c7f2", "sighting--7c3f83c5-8913-4725-9852-abf9a6dfc83b", "sighting--6e1f8243-29d7-470a-afb6-aa3666a10f0d", "sighting--25d2f67f-9d9f-42fe-b9ae-77ffb08d4d96", "sighting--3afa9baa-b909-42ce-9c25-26eae8fbe380", "sighting--dd89f6e0-4472-4672-82c5-7ca476569f67", "sighting--bed22a7f-03f3-4aa9-94c4-2ff1605f3c87", "sighting--063549b0-c938-43ad-824d-c1c692288ed6", "sighting--3fdd4608-0dcf-4254-b6b8-0a8a675a2c17", "sighting--9e4c2d90-8e94-4093-a684-0fa1ccc99ad0", "sighting--1649cc90-bcac-4ef6-8cb8-64203990b9df", "sighting--39bdadbb-7677-4b66-952f-3cf0f5efa486", "sighting--27ecfeb7-6fd0-43f2-8d5d-56af83d9047e", "sighting--8bc328c1-14bf-4298-84cc-f34c7031269e", "sighting--7252a680-e72f-435e-9ba6-3760b9df24cb", "sighting--117ee035-00b8-4133-a876-25c700877f53", "sighting--f4d2aa86-0092-4f88-9c43-7934b95bb494", "sighting--aa13d1d3-35eb-4dfa-9ce4-0ae0ae27fc19", "sighting--a70e4f46-6ff3-4ecd-819f-29b3966e539d", "sighting--2f1740c1-a831-4ad8-b306-100b004bf506", "sighting--e8657779-5a5c-4b0a-a680-14115a83424c", "sighting--2bdfcb38-7cb5-4731-a926-24d21c30c4ff", "sighting--a42d1661-6572-4831-9373-5f1ca60bc8d1", "sighting--476567a6-c95a-411a-8f48-3a5e5956f755", "sighting--0cbee423-2618-47d3-b836-f0c9909f4eff", "sighting--cabebf21-fdd1-4991-9c8b-28bd396896b0", "sighting--057954e8-cc11-4ff5-882f-5551c4777157", "sighting--269baf99-6b00-4d46-a1bd-754bd04509e8", "sighting--08bc0c1e-f99d-4e25-b649-13255184020c", "sighting--77203c2a-017b-4060-9438-b95bc40b59b6", "sighting--31b4b663-c44f-46ac-866e-bb0446490c38", "sighting--c79e0a26-3aa3-45a7-9a2c-9aed9d094a28", "sighting--7d0e83b0-54c9-4454-9dca-e218216ada68", "sighting--a95c16c6-049b-4917-8aa3-477dc681cb6a", "sighting--2e892fe0-75a6-4c58-9d92-0cd723384d7f", "sighting--1e224005-aa0f-46ea-8085-771dd31eec2e", "sighting--dc9080ad-0f1f-4c6c-83ef-d2f7fa31b428", "sighting--29f9c0b1-f167-413e-8fb4-d4030d4032ee", "sighting--5120755a-371d-4057-a180-f097c2a1a101", "sighting--ffd67d21-da4f-473d-a6bb-1cbd27a8573e", "sighting--c663a45d-9ea8-412a-bf62-ccaf00ab6640", "sighting--346c222d-c078-48e4-b354-2279c279bd4d", "sighting--182a3c5c-a0db-471e-a7f0-91df0b567df3", "sighting--8a0b2916-900a-408f-b392-640b91bb6587", "sighting--cd3b33ff-4869-4bfa-88e7-a9b1b3805baf", "sighting--7a0e98b3-9cc7-4351-bb0f-c02fe845545c", "sighting--f5ef8c4c-ce72-470b-8b42-141bd92671d3", "sighting--1beac782-f0a7-404c-a789-943d9e9e4fe8", "sighting--6a49688e-7ce0-4bf4-be62-9de1cecce20c", "sighting--63b73ad8-ffe8-4114-b352-a39516ed6fa6", "sighting--94cf66ee-d298-4f92-868a-84f62d1942ee", "sighting--156ac3f8-03a8-4a4f-af27-8167ca2b3109", "sighting--137af9da-aaa0-459a-a31a-73e66617e608", "sighting--2d36e571-cbd9-42d0-9134-228170dd551a", "sighting--910b8008-d30e-42fc-b7fa-ce9ff9f4cccf", "sighting--aae6d056-c6a8-49e7-938b-8b5952f9b102", "sighting--61f9fb72-86a5-46da-b9a4-ee731bfa5b7b", "sighting--2e0cc35c-ccde-433b-8a73-c0a320d03fb5", "sighting--e278f9c2-9110-4802-a619-fcaf46c9a00f", "sighting--158c0703-ae1a-4b60-8256-00145bf80e99", "sighting--e73a0e4a-0179-47bb-847f-94c209a709f1", "sighting--cb06ee1f-9be1-4fd8-b159-8713cb6c35a3", "sighting--94117188-82b5-44fd-b70e-2d67fb177fe1", "sighting--01733fbf-9258-4e00-937f-bc784bbe3738", "sighting--f863927e-8424-46c0-b7e6-474d1e2a625d", "sighting--0b7c6a79-45a5-42fd-933b-37f267f46aa2", "sighting--c880dd92-034b-4887-b9bf-6175b85d238b", "sighting--40be7570-32c3-45e9-8093-d91dea21adbf", "sighting--98779395-aec2-41dd-b528-8265dc3a5522", "sighting--123499f0-9d3e-4b9c-93da-ed90c697354f", "sighting--60cf71d1-4a79-4517-a5ef-4deb2c99a489", "sighting--01e36cbc-79bd-4371-9636-114a5d3b0f04", "sighting--10cca3b2-5b09-4099-a9a7-9c7c517aef92", "sighting--bab55f15-3084-4cc9-9629-6e72eb506b72", "sighting--f5c0745a-a20f-42ae-8fb5-8cf5174dadea", "sighting--00f7193c-f291-4a79-9648-b16d6488bccb", "sighting--670df150-ea6d-4dcf-affe-50807df2b9df", "sighting--cd1bca06-3d92-4f83-bf09-237d5d4b91af", "sighting--f4033ff9-99d9-4f82-beb0-19a6d08079ec", "sighting--361c11f7-87ad-4c95-a816-44d7e8c6c057", "sighting--51025b83-08a2-4505-b762-65f889cc19c1", "sighting--f4a3d240-e628-4f42-bf2e-9808d72c7f48", "sighting--52cb80b2-8d46-404d-970d-8c01ddd26547", "sighting--f3008e9a-b17f-49a9-96e5-71a4c1e6dc8c", "sighting--2ac3a223-38bb-4048-a0fd-fbeb9c63673e", "sighting--1eff9cbf-8146-45d9-90a7-2af090b35f79", "sighting--561a946f-5f31-4b4d-b455-9cd26d6bde7f", "sighting--2fc15b3b-e36a-4859-a239-6acb29174b2b", "sighting--00ee3d82-89cb-4a31-b31b-aabc4a8d53e5", "sighting--c9cab3c9-6275-4c0b-9526-0d6f4b2c06ff", "sighting--602d0fe1-ad51-4141-9867-e541c0df980e", "sighting--f897b644-3f32-47f6-834d-79ef2184a5d7", "sighting--8303f5de-a4a2-4b3e-978c-4d86295bfde3", "sighting--be7233d9-edfa-4efe-9fcc-b8ab4efe7897", "sighting--ae1dcb0a-af36-499f-90ea-ca34e3cffe37", "sighting--ea7ac9b8-e56e-4fcb-a96c-deb1f13fb3c7", "sighting--b2bed18f-9089-4ed1-8e73-938061a43df4", "sighting--5d1fc559-f91b-42ce-a1e5-7c67b69fd2a9", "sighting--069fc509-2e35-4439-86a2-ff4f9583b853", "sighting--f05ff7d5-40af-4fc2-b8d2-3f7ed006ee51", "sighting--5622857c-8b3b-4b01-91bf-3009072b1e6e", "sighting--5b6d4951-e6d6-418b-bf91-7b7515c45b30", "sighting--af7e0b88-9446-4a6e-b8e4-eb233cb4e477", "sighting--9f84e60c-f564-45d9-b1de-077acc893d5e", "sighting--68a84cb0-8a24-48d8-91b1-b8e667ddbaa1", "sighting--3baf6da7-13b8-4033-9521-f8e41204987d", "sighting--5b9198ef-3026-4229-bec4-96dc8fecff79", "sighting--69668c8e-3e41-40c5-941e-f7e548946262", "sighting--66a6ba1c-347b-4591-a10b-288e1e4f4afc", "sighting--a5314861-3411-4d9a-9085-5725f2d13e2e", "sighting--6a4c8f85-ef45-487b-a858-ba1e9637b1ad", "sighting--3e27e3c3-2d3c-466c-9701-e0e21c3d4663", "sighting--1c319dd2-7c38-4c75-9447-fbb3077706a8", "sighting--af231a82-4170-43ab-b59c-4a0f808cbacd", "sighting--449094a0-3617-4f4d-b450-a2f3d3cd533b", "sighting--04c2c370-a33e-478c-9b5b-885f01c33546", "sighting--97df7c12-f409-4bd1-9506-b05729d27372", "sighting--1404008c-89f5-4743-b1c9-84bf69f1e40f", "sighting--abdc493c-8500-4693-99e0-af8d7ed079f1", "sighting--652e9bb0-a130-46ce-b535-aa0dea27bfde", "sighting--4d20e190-5a53-4f43-906b-95d6e6d4dd96", "sighting--d52c6a5f-47b2-4207-b130-acc0fa4de6cc", "sighting--a018989d-c8fe-464f-8e88-e85b18200fff", "sighting--19016688-a367-4ccd-bd48-2a9c7608407a", "sighting--abcc20cb-6d39-4b2a-b75a-f5bd669c1545", "sighting--75c59e44-16f1-4652-b907-0c31b9ce1034", "sighting--461db5fd-5d4f-4eeb-ab5b-c72f584b0d17", "sighting--a90758a1-06bc-4cf5-b5e0-1812dd3a21bf", "sighting--ce72a96a-0017-4f52-a02b-0526ea814a55", "sighting--d8821d85-2985-4e1f-9af5-cec4460f8e96", "sighting--47548422-7e59-4059-943f-9947e3d55907", "sighting--d838d7a1-c9ec-450a-9883-0c572e76aa0e", "sighting--32d2951a-95e2-4ddf-b48c-c61ddab908cf", "sighting--503b44fe-ca49-4fb3-b8e0-6a3fe0203fbc", "sighting--8e97c0c0-0d9b-4f86-ba53-fde7cbaa0829", "sighting--79fb2ffe-ac27-461a-a337-e5c71337dfa3", "sighting--d451f87e-e5b3-4c9f-ad22-6f01443f5835", "sighting--9258428a-c8d4-4b0f-9049-1188fc400e5a", "sighting--05ec6163-b7a9-4bb7-9c92-492dc61b001f", "sighting--0cf804f6-8336-4034-9b2d-d5b457bb6961", "sighting--b546dfad-dbe5-4642-866f-efde3dfc4865", "sighting--f34c41cd-28d5-42dc-a07b-195759c2eb7b", "sighting--e831b9a8-9e4e-4414-8091-981a8960b183", "sighting--62052456-0961-412e-8087-701d6f7bce0b", "sighting--0adc549e-1d69-47e1-9c5a-18b4d42577ef", "sighting--06a4d872-2ab6-44b6-8d91-330e70873184", "sighting--64981195-a8f2-42c2-8bf5-1e5c4c908f11", "sighting--b4e05658-d8f5-4691-be24-cf2391db30c2", "sighting--26270564-6b96-4f82-b36a-ec4f16f2ac4b", "sighting--7e531184-79ce-4688-ae0f-51383665d98e", "sighting--dbebd03c-1d12-4e17-81d0-a1fb274d4031", "sighting--f3f1e647-91c9-49d1-9ee3-4e351d1bf327", "sighting--9db47827-c396-4875-b0ea-1f833f2faa38", "sighting--bd10e63b-1b8e-4c9d-86ba-a8f9ca773cf6", "sighting--288595e1-f380-4c03-96e7-fd0fc7ed99a2", "sighting--b6e61934-8da7-417a-aa0d-54aa91f1197a", "sighting--e8002d8e-af70-46e4-9186-461db9a7ee55", "sighting--348f48fb-120a-4358-8123-e197435f818e", "sighting--a5d3359f-ce27-4d82-95c1-4c19d8a96ffa", "sighting--1afddfcb-f20f-4a49-9110-e0cbb9c39ec7", "sighting--8f004d42-0337-4e8c-abb5-d9193464a2d8", "sighting--ab973aba-b0dd-4076-beef-af68dba4e1c0", "sighting--da9f140d-cce7-4973-a060-47cc05cacef0", "sighting--05ef7a46-47ef-4393-89c9-f366920d6776", "sighting--136de8e5-da06-49cc-8f8c-dc15952394f4", "sighting--92e20802-4ddd-43f2-bb41-6774d2256a88", "sighting--7d458ba9-3325-4c60-a8d2-bef0e4c42d70", "sighting--58ce0af2-3f6e-499c-ae11-402fc6d6518b", "sighting--584bde92-fc1e-42ba-be91-1cfb526f0424", "sighting--c46f257e-2fe9-4b28-b4a2-f10d4d856bb7", "sighting--bc141335-e081-4fae-bc0f-7068895ebff7", "sighting--f1fb1d75-e02a-4ab9-b0c2-7e5024c77e84", "sighting--8da5b5ad-10ec-451b-9d6f-bc7edc348775", "sighting--7a56873c-3979-484b-bb01-a9040e6bc017", "sighting--b56b1afd-dad5-47f4-a5c4-a172e4c6b038", "sighting--1751c4d1-e578-44a5-b838-2544f496df99", "sighting--24963d83-7fbb-410c-a24d-82738891dc38", "sighting--b300d1b8-8cf1-4e96-b5ae-6c34347a0260", "sighting--2d098384-3050-4924-a741-d51b7f3a022a", "sighting--e5fabe52-38e4-4db2-83ea-4ae3d65e5e5b", "sighting--7c6910ac-5f85-4b53-affd-b73304d4acd6", "sighting--e299636a-c5a3-4bd5-98a4-3d9d879b88d9", "sighting--4f8eebb5-a3a3-4d76-aa0e-3932c1cb8325", "sighting--89dc7eaf-b2c6-45d1-997a-866e420c6199", "sighting--3a6b88a4-1be5-4b7c-882d-568ca7a36e9c", "sighting--e7e035ed-fbe8-46b2-8b69-b95ecc272059", "sighting--3ae2cc71-623c-4142-a3f8-40e26be7a30e", "sighting--7be1292f-45de-41b1-9565-06f20d368239", "sighting--5550798d-4eaa-464b-ae53-522855592226", "sighting--8ffca3ef-6839-4362-9e43-73fbd6747105", "sighting--bdf34f3b-462d-46da-9ba6-2ebba659ae57", "sighting--c6fa6658-62c5-4375-983a-36c0b8fca852", "sighting--593d60ae-5bb8-420a-826b-fdd96b2beb62", "sighting--5b54921e-f92c-4b95-a2dd-9e532edaaca7", "sighting--4ce6363c-3e2e-4083-ae92-b65d352dc6c4", "sighting--1be24ce9-b79b-4c6d-b525-799206e72c3e", "sighting--8f6609a2-32f1-4159-abfc-5970256e7327", "sighting--06e9ec36-7caa-4871-bb27-d21e11ecef38", "sighting--b4514e06-e47e-4fec-bf9d-e201ebc731e9", "sighting--d6d49982-5522-4438-bbd8-81615364971c", "sighting--f9e73476-473e-4451-84aa-ec6f892be5a5", "sighting--32dd2f2e-8aa4-4b26-9873-70fc43cd74d3", "sighting--8a301c38-d7e2-4b61-871f-d1effb3c4c8d", "sighting--d29ea3cd-ba54-43aa-9f02-a26bf7d00031", "sighting--67ae8616-2583-4e8d-8b62-08c6ebc8c32d", "sighting--aef66610-17d3-432a-9b78-60aa8a95ce31", "sighting--03113fc8-2882-4cc7-b44d-85546b272550", "sighting--4c0ef3aa-0ccc-4919-b9a1-8042d9c3b554", "sighting--8f110504-ebaf-44af-9ed3-8e76937e67bf", "sighting--92f6e456-b995-4a85-a172-7beb7782442d", "sighting--53636c24-f299-4170-a995-b7a13deee4c4", "sighting--a0f8505c-6da8-4582-8a38-1b089f8bcc91", "sighting--71b659c7-60cd-4017-92d7-1a4c47274d63", "sighting--cc1fcd4a-9fbd-4e13-8cb2-d6ea69bbb8a6", "sighting--9271e561-9dea-4d50-8ccf-41b62f21b266", "sighting--6b48b705-5e12-4374-bc86-cde2ac47f57c", "sighting--900049fc-38f2-4bae-b316-eaeab250c379", "sighting--316a3bde-78d3-409c-96ad-4013b3a22195", "sighting--4937f371-1aa8-41c3-8b80-0637933f03fd", "sighting--3981599d-49f4-4e98-85ea-2d3001f90c1f", "sighting--6940f2b1-b25d-4333-a0dc-9e2f12e5877d", "sighting--ea8a9d56-cac4-4e79-a3d9-865dcb1a316c", "sighting--5fe7ef4b-5604-4ff4-834e-d4d327968bb2", "sighting--87cc284b-26d9-480b-91cd-b57d74f4b2b2", "sighting--3c73cd1b-2cc0-4c2d-93f3-79581f6671c9", "sighting--7aaf2058-f768-4d4b-b81b-a60c5993335d", "sighting--63b800a9-a9e9-4d41-98a2-88d173cef105", "sighting--0584e5aa-e2ae-4786-805d-844ca7426106", "sighting--a55bcd97-3a1d-46c2-90cd-2e360ab47423", "sighting--5507c348-557d-4240-85f1-d7da48ed537c", "sighting--3bfd186a-2af3-4120-8542-0ef8691b86a2", "sighting--fd3f1f32-6e4a-46a8-9caf-af26feeb4fb7", "sighting--1c020afe-a7ff-440c-bc6b-9d8001d669b2", "sighting--1e678a4b-9466-46c7-878b-8f4ffd272a91", "sighting--4b6c1707-2032-49f3-8214-d5d100b0e1fa", "sighting--40e596eb-515c-4fdd-aea8-d807ef340911", "sighting--f294d67b-5323-4f9f-b4b0-0eedf3e46030", "sighting--9295230a-04ce-47dd-a45f-312c7c24c436", "sighting--bfe3e882-d9ab-4c12-b4d1-3832a66c7c1b", "sighting--7e1a04de-0912-4264-93fd-0f2fe8a6ffee", "sighting--ae2f9aeb-bbc0-48ae-a9b2-a1e43fd6799e", "sighting--8286ac91-0c23-4762-8529-4eb0e684cebc", "sighting--baff48ef-2efe-487f-9435-5aa728928acb", "sighting--c8e895b7-c3cc-4099-819e-8292ddfd0453", "sighting--5f73e229-3363-4259-aba4-8a90537344ad", "sighting--426d755c-f1f1-40cf-96df-9f4a0e410d26", "sighting--dc67827a-9ae1-4d29-b941-aa8db72aa25d", "sighting--915dd6b6-0e84-4be0-9962-411f1ed9d5fd", "sighting--71bffbfe-83e9-4caa-aab2-41d2b9ea447b", "sighting--eeb1ba60-3cf2-480c-adad-7a758829fd74", "sighting--e1b7b808-e062-40c2-9bde-5d8f88f1e360", "sighting--e529e969-15bc-4f1a-aec5-999d2f7c207e", "sighting--2e472b9e-1ff4-45a6-aae0-b23bdef9af5d", "sighting--43684d5a-593e-4359-8978-ff36eb77b92d", "sighting--4d215444-8908-4301-b28e-0313266a59f0", "sighting--3475255b-6d80-4aeb-90d3-b16deba177df", "sighting--dede955e-3c9f-48ed-9eda-03e546415c37", "sighting--3f213fae-05ab-4efb-add5-2274e8bfee9f", "sighting--87056383-ba68-423e-87d8-738074aa59b5", "sighting--7ebecfbc-1ebf-4f67-9deb-7905ad11078c", "sighting--1832614f-5ff1-49ac-a523-975b143588c8", "sighting--70a26220-cd15-4f79-8504-d497cee796e2", "sighting--60fde72c-d309-45c3-983b-17090d4dc146", "sighting--638da526-6f1f-4124-943f-9b4a1ca29484", "sighting--27ddeea6-cff4-4b98-a03d-85d0ac6677d2", "sighting--611d5a83-9c08-4944-b871-1ea6aa7be477", "sighting--b0ddfa24-bc5a-4abf-8fc0-40c1bea14209", "sighting--0ad8fe49-4404-4e7a-be85-71917a3e2496", "sighting--b0b694e6-0369-48f0-886a-7dea9e84f8c6", "sighting--cb10e849-80be-407d-b76c-4fed97249b2e", "sighting--b45a05b8-292e-43af-b554-c6b50314f0d4", "sighting--3571faa9-9f33-488b-859c-5523f0128a2a", "sighting--d8dbd328-4573-4afd-a8cc-16cbee8abdad", "sighting--de49e631-ac3e-444d-85dd-0883b0af6bb0", "sighting--7e91f1ad-e8fc-488e-b248-712d53785b35", "sighting--bc1e5907-f923-4a7a-bf8e-62fc13363ba7", "sighting--98b7b79b-173a-4a73-baf6-1cf7df8db507", "sighting--64d14212-5bca-4b5c-87f5-93f94f9d503b", "sighting--8577b45f-ea2f-4d4c-8c36-c20e6436b2c6", "sighting--ce0c70f9-4750-4b21-ba25-c7a0d9e03566", "sighting--9a36c77f-7034-44ae-b73c-a9963e33ef0d", "sighting--d687351e-b879-4484-839c-e9ec138aac6b", "sighting--e8ce5624-d027-44e0-a7f6-533a16e64c4a", "sighting--b6259c4c-658b-4db3-a1cb-c5fdd3396c74", "sighting--4e8111f3-dfd7-4bd2-997c-da8bbe060b82", "sighting--b667cb2b-c9fe-4523-813b-f2d2460d4c36", "sighting--eedb45c9-aff4-4ea7-8590-bb0187860d9a", "sighting--1401f2c9-5f93-4b11-81fe-32308e4f0e49", "sighting--a843146f-dfb9-4750-94f8-a319cf8a820e", "sighting--73470ab2-7dc8-4758-9de0-40d6ab7f2e4a", "sighting--3c4dea22-0e92-4b93-b2f3-23af365b5ca0", "sighting--d2377bac-b07a-43b3-b785-cc9b98ee24cf", "sighting--1c70288d-fe6f-4fe1-a09b-35c3558afae6", "sighting--2212ebee-a18a-43b7-817e-149f72e6e5c4", "sighting--f9144a06-9c2b-49aa-9457-8d6808a0c134", "sighting--e85c91d3-65d3-4fa8-8444-f0805e3e8d8e", "sighting--fdd75e10-ca11-4b41-b870-f054717c62bb", "sighting--9e490d5b-3a25-4598-9952-3ea6c2a935f6", "sighting--d59a741f-d2a0-479b-bea9-d7fc5f5f8457", "sighting--4e29ce78-d1fb-44d0-8b64-f69df7aee3ec", "sighting--fbf1d957-6cb6-4bbc-a423-bb5605b0026b", "sighting--3dcb5b4b-bcfb-4c79-8135-a0f7d34e3f07", "sighting--1d9eaa7f-05fb-4374-b562-a6aa68a57bfd", "sighting--f93fb872-89ff-4311-8190-2a74f16ff188", "sighting--66cfed7a-c34d-49b7-8a4b-0bebdc83fade", "sighting--40760d1b-8865-4b75-a5b6-864a22071d65", "sighting--09075768-e0c7-4399-b31f-4d6508f849c5", "sighting--5c0cded5-f297-4a5a-81aa-8f36b5021f23", "sighting--48fd4bf4-6ae0-4df0-89cc-6684f469b092", "sighting--93341866-6468-437a-86d6-fc6107d69bf1", "sighting--a5548cf2-b462-45d3-a3fb-01500cc6aa8b", "sighting--0b49f4b0-0c94-4f0d-b373-05f50b564beb", "sighting--e9576860-a91c-4bef-9f3d-4733972505c8", "sighting--1d7e22f4-efc5-490a-ae56-96cc9836eb43", "sighting--f870cba1-3107-43b7-845d-ed7e1973d8b8", "sighting--84097e4e-2e44-4d28-b4c8-ae16ca1e6364", "sighting--57189cc2-e2f3-457a-bb9f-ac7dc0587a23", "sighting--a555e70a-56e3-4ff4-b9cb-330f5d7a01b4", "sighting--10751c03-a5ab-442e-9a5c-2500679b9aef", "sighting--7fb8df1f-3253-4035-8d41-babde7680e99", "sighting--ff5bca18-aba6-439a-becb-4b575bc83a5a", "sighting--bc396284-40ed-4160-aa11-02d38c515a5e", "sighting--f6c06ff0-ffa3-4cb7-984e-6455d5bd8968", "sighting--418ed00a-3013-4668-ad25-4ceddd035b36", "sighting--2acf05f2-80c7-485a-a0f6-d3caa86cd4d2", "sighting--ec88e0e4-7227-4f7c-97ed-df034194ecd4", "sighting--d9c03427-a9df-4024-8108-3c4a093f7fed", "sighting--2d3b304b-83a1-4a91-a577-524d58a08688", "sighting--a81842d3-e736-4486-bb1b-202ade10912f", "sighting--50a54f41-2eda-4a02-9934-9b17b0f9ee2f", "sighting--49bd6a94-e4de-4ce2-8ed5-3109c925af28", "sighting--99126c3a-a014-43cd-91c1-e8f8d67b7d2f", "sighting--ee232620-d65f-493b-9f53-7757cddb8f15", "sighting--60e71a1d-4feb-406c-82ff-360096d8f567", "sighting--0dd72f98-2148-4275-acc0-2dead2672be3", "sighting--ca64bafc-ba90-47aa-a5a0-0dfa8494af19", "sighting--1ac2f914-bf61-4b12-809e-bb1b41e1f886", "sighting--88b3bd7f-0603-4a65-a61d-fc17c4d96249", "sighting--5df47b83-9089-4ebd-983c-89a18b3d6755", "sighting--3249d157-1d3a-4d4d-b48d-7d739c93b9ba", "sighting--baf591ac-47ff-4f14-b405-f915f69c7e66", "sighting--3658237a-d29b-44a3-ade7-f2752672f8d9", "sighting--9e22a927-f155-49e7-8782-bafb521f0fef", "sighting--13ff9d5c-95f4-4cd0-bf7a-d72f0f3d9d54", "sighting--5ed95658-fdbe-424c-b123-9ac42abf4c28", "sighting--438a2e6d-3238-4d60-a9bc-757f6ef9c2b3", "sighting--29b93bc7-951c-4fe4-8cf3-4cfa0810b630", "sighting--58f2cdf6-bda4-4729-80c2-5684a6c38de6", "sighting--1c1751a4-4fcd-422b-9366-868e5a615f75", "sighting--dad5a426-3224-49c3-9b74-c227ed2b8958", "sighting--82750466-9836-4e17-aa33-1a269b8573a6", "sighting--117222c4-71a6-401c-a98c-6a7435bc47af", "sighting--a2933f47-b950-4e81-b3be-b617b6ce6c99", "sighting--18a46409-fb80-4f90-910d-c4dc8270c5b1", "sighting--83f7d4b9-fc0b-4249-89e2-965e0fcd3ce4", "sighting--1f8570d8-e104-49a9-b271-2e07627da5d4", "sighting--97ba277a-a1d1-4f79-ab05-a9942a0a2f92", "sighting--42ea059c-379f-45a5-807b-3c2228acebd7", "sighting--529efc87-ee42-4886-894e-154c2ed896c1", "sighting--5ff6c2a5-8da5-4373-9d28-dc2fd8112bda", "sighting--dae209c3-d323-4eef-bfad-461e7e1a7278", "sighting--4221945f-c2d2-4497-ae1b-f917fba4bd73", "sighting--96456942-98df-4c53-b8e3-3d93c05fc77b", "sighting--63f54ccf-59b8-4384-b541-5d1495867fd3", "sighting--a3449129-ad8f-422b-a77e-59bce3ba0766", "sighting--5925ca5b-5ba6-4023-ab41-f75a192efebc", "sighting--2fd8bdfd-6601-4e8a-8eb4-d9ec7f30777d", "sighting--9bd030d6-20bb-454f-a39f-f07f1dc43177", "sighting--22124113-2853-4afc-84b4-e317ba3285e4", "sighting--1d5121dd-b079-406b-a253-1a1e32ff090f", "sighting--f17d90bf-99fb-4687-b740-48e444d2890d", "sighting--10b4ede2-e211-49f2-bda9-52c0d61f2dd2", "sighting--32e82f40-3317-446f-8968-c7e6ae3cfe19", "sighting--5871f835-565b-4cb3-90a8-8fa3998cfcce", "sighting--b55d8f43-1d21-4d68-8077-4fd02054fee3", "sighting--3213478e-511d-433a-81e9-b986b215220f", "sighting--2e56383b-6f99-4a1f-adc5-8f437676a271", "sighting--d2f6cded-f081-48ec-ab2c-390995c77157", "sighting--36fa6334-ca4e-499c-92e8-587cd9a00f39", "sighting--217f2111-6b7c-46f1-a156-96781a2f23aa", "sighting--83d9b13c-1d1e-4c03-a032-6964aceece71", "sighting--4f66f3b2-07c2-48b9-8f4b-5e4e97099fcd", "sighting--e781f79d-2471-405b-9db3-e7ec8385d972", "sighting--28cacd38-ab5a-4e5e-b5a7-797ddbf5bdda", "sighting--c62ce301-d5be-4acc-80b9-ca38d5c2056d", "sighting--dab68358-53c7-46e4-8b3f-6e1f235b6b6e", "sighting--443e2e5d-eac0-4edd-afd9-57d7f5f98fe0", "sighting--e9b97b69-32b4-4127-bd4b-4d333acb714b", "sighting--cc97fd3e-aee7-4a73-bb54-31974cd87fd5", "sighting--28cd200a-9666-468d-8f46-d2b0694f514d", "sighting--b55341be-3ea2-4091-b1ff-d9afb662703d", "sighting--2c379186-0e8c-49fc-a895-2926369d046c", "sighting--3b5a2afe-de17-420a-9a24-bf792cf8f06b", "sighting--fdc0400d-8cd6-4ace-9436-3e4c8e9b5293", "sighting--54846e7b-fa1f-42a0-ade6-dbd5a7add976", "sighting--60fea366-c5f5-431b-aab8-e2138627e475", "sighting--f7aae982-aa18-48bf-a10d-4f697f3d6bd4", "sighting--09eddd8d-89e6-46a0-bf6c-78effd80af50", "sighting--05c18af5-52c3-490a-8d36-ae3b1edad75b", "sighting--a748965d-3b86-41d2-8466-0fcc8df6e353", "sighting--728d44b0-eabc-40bb-9258-9fdc323263c4", "sighting--4fe3ee25-838a-4059-b78b-6f6f8f1649da", "sighting--fcd4944a-5b8e-442a-8fa6-f94ba6df4942", "sighting--950c208d-a112-451d-bcdf-d8bec9aeabbf", "sighting--364fcfc8-97bb-41ae-a974-16f8392375fc", "sighting--38b629c7-4454-4044-a204-6bb328ef064b", "sighting--451775b4-1b86-4298-8eec-3842f372fa0e", "sighting--36a22ee5-47cd-45d5-8a0d-ba744e23b717", "sighting--26cd040a-4b36-4ff6-9772-498b685e5454", "sighting--de43e92d-87dd-4bf5-a601-8498a22c0554", "sighting--3d90a390-9b7b-47c4-aaa9-7d4b616a234b", "sighting--f37f9a71-fd1d-475a-a309-701fdb8168f3", "sighting--4c159bfe-c707-409c-8ed2-4189b164537f", "sighting--9e1317ca-1795-42df-9162-c7d2bd22d647", "sighting--305189d4-3e2e-436f-92dd-07e0e6e0356a", "sighting--82facb12-ef92-4fed-b22d-24689f2b8cc3", "sighting--4437beef-2464-495f-8f7c-472104f646ad", "sighting--75e89601-2c8b-4def-b321-cad46ee399cf", "sighting--dea4ab95-a6dd-4b57-8c51-7eeb9be53d2d", "sighting--9aa9b4d9-74fb-442e-a84c-a99ac13543d4", "sighting--12424503-45ac-47c7-bb66-b1744f900d65", "sighting--2f21f4ac-6292-4de4-9b7c-630079aad26a", "sighting--11394497-fd3e-4ca8-9829-159a21d0f2f0", "sighting--06bafbff-3ee9-4b72-ab59-915180a958c2", "sighting--fed23515-1b02-45dd-8320-1bbd8cc019fa", "sighting--32e3a8ab-9f9a-4fa0-a9a5-7bbf52f9ead3", "sighting--304b1d9d-1c09-4a2c-a089-2c0993f910a0", "sighting--e7fae98b-2817-468f-809d-85f0c0e12228", "sighting--9ecb0624-862b-496b-adfc-948329a1c6a9", "sighting--45c714cf-2a8a-4998-9155-75304a3c4f11", "sighting--13849545-6fab-4cca-8304-08e32e9f691f", "sighting--e0754873-73f3-411a-82c4-e8308b6f8f87", "sighting--72e6a571-e5ae-4227-912a-7e0c835bcd4d", "sighting--27b7f392-395a-4177-b0f7-4e9184f26ca9", "sighting--1ccf981e-9640-42db-8afa-30160afdb83e", "sighting--f3923c5e-a803-4c3c-b30f-0e027f530817", "sighting--049e3c10-0550-41dc-b546-f337bd90b9ca", "sighting--d531654c-ceee-4bfb-8630-0904fe0b73e6", "sighting--498fdc61-8add-4248-b2a8-842816f5b9ca", "sighting--5a07cdbc-37f4-4694-b8b3-0c262b480f82", "sighting--b151b66d-f5b3-48aa-9881-b29184c5f6fc", "sighting--8f6cc333-fbe4-452a-b22f-7bf30554dfe0", "sighting--54b64096-ef20-477e-930f-389e6d00274f", "sighting--ef87049a-b4c9-407f-93fd-568c3b27f0a7", "sighting--a894d678-17a8-4bd9-83ab-ca8a8bf9a079", "sighting--ee6c8269-a2b8-4fec-be13-0c3f579e5c17", "sighting--1cbf26c1-ed52-4dc3-9d51-8e990363a28b", "sighting--af1fb1a7-686b-4de6-afd2-df50a9c72e4b", "sighting--6efb504c-801e-441b-bc07-e66e058e5f89", "sighting--da7372f4-901b-417a-99ec-6f6e38f7f2c3", "sighting--805831f0-1150-4294-9e2b-62f828810077", "sighting--8475618d-6e4e-421c-aa63-126245972784", "sighting--a31b84f8-00cd-4023-a1b2-e8e864294673", "sighting--24f3033e-11c6-4c87-8790-13847d9efc3d", "sighting--06c15926-3ae1-4e6c-a8a9-1b65b96d1a4e", "sighting--391760bc-066a-448e-a73e-dffe6bd9a317", "sighting--2a266cca-dc42-475a-81ae-d6a6cbaaaefb", "sighting--4b4c68b9-b889-47c7-8334-75d070435424", "sighting--fefa6fd4-9620-40db-828a-b0e6ae0efbda", "sighting--74da4e18-db4a-4d50-9c89-271dfa5b293c", "sighting--d5f5b213-eb39-47df-876d-64ad9ccd911b", "sighting--785d13fd-4b28-4f82-9c06-8eb37b9ea4bf", "sighting--41524959-6bef-4147-9016-1f5e67513f26", "sighting--f2e9c9e8-6462-434e-af0c-c1874f1364f1", "sighting--69ea5934-1a48-4e28-a61a-78d186a119b8", "sighting--52cdf102-d3e3-454f-892f-4c9a51f1ab72", "sighting--8bd2df34-f4f0-4044-9e7c-e1a02d25e4fa", "sighting--20f19795-aed5-44cc-a1a3-d593164c521a", "sighting--0061979b-c8c5-42f4-a1a3-f69662d55b49", "sighting--38b1f9c7-e5ba-4dc5-828e-03032fec7add", "sighting--f235f16c-cd31-4717-b051-b646206cda23", "sighting--30e930cf-47e8-4c7c-8c1a-cd701f98999f", "sighting--4870dcea-787a-4169-a593-8f0befbae66c", "sighting--0744daa2-ea70-484e-ac7a-81aa737356e9", "sighting--1e47c434-4854-4bad-afab-9c04948e7bf1", "sighting--a08ed42c-1e2f-4240-8d4e-d340f2b62ed1", "sighting--25369c2e-4979-44dd-a79d-3390ecd62c9e", "sighting--e5fc9a8a-288d-437f-b734-7df121ae7a58", "sighting--df26894a-63e0-4b49-9e52-c874a4963e1d", "sighting--1db96a36-d4f4-46de-a235-5402ff6d9e21", "sighting--6b910dc5-078a-419e-ab84-b41009530e64", "sighting--9fc640a1-4223-4535-8750-af5bee600bd1", "sighting--b22f7a01-5382-4108-a12e-3777bd5e0436", "sighting--f1b97059-9f6b-4c80-853e-03060f870227", "sighting--6664f145-877f-4b4e-b603-f398d0cb4a53", "sighting--df779429-0b30-4225-a6fc-43392a4bce77", "sighting--49366391-c818-418d-a58f-1a8b96027539", "sighting--ee645986-598c-45a4-ac7b-d34464bf736a", "sighting--4c0b822d-3a25-486c-82e8-a93f833c5702", "sighting--4809e595-ea3b-46f2-bb3d-eee20b2ed9ea", "sighting--9a8599e0-90cc-4488-b046-282aaec39713", "sighting--aa25a9a3-631a-4548-b178-ec9e9187108b", "sighting--79480650-7af5-4d59-bc5f-7dccfae43213", "sighting--d3e9e6fa-8503-4648-884d-a703574cfb10", "sighting--47851d6d-1f7c-40f1-95f5-b7a3f2afdf4f", "sighting--8bda2dd6-403f-4439-b53c-d4bd458c07d1", "sighting--b0e39f55-2e0e-4ca6-99ff-ddac6cd4ef71", "sighting--22b2f72e-1583-4097-84af-3f82497ed24a", "sighting--2f0f8a95-4c31-4aab-859c-a4e3fa3edca2", "sighting--c39361d1-bd1d-4353-ac5e-b67055b94b53", "sighting--3f8780ef-0aac-40f3-8fd2-f8fc8a911232", "sighting--23b4166d-ec45-4a51-97cc-7e9c7aee13ba", "sighting--fe13bda8-ee50-4257-afeb-2f17a1b4288a", "sighting--593df00e-e16c-468f-8b6d-80ab422e7751", "sighting--843c74c6-e134-4be5-8143-4406ac6aec70", "sighting--425c1e46-3403-4ac0-bcf2-316c53dcc638", "sighting--902186be-e052-4fdf-81c7-642d28ba93fd", "sighting--2d74d993-5bae-4312-a9fe-444802814a6a", "sighting--9af4375a-5265-4f24-81ec-e553577d0564", "sighting--7a24e1b9-aeca-44c5-979e-cb0e030c3023", "sighting--14338ddc-2a25-46c5-9d4a-257b9ad5f602", "sighting--33a8538b-1b79-46ae-887a-94b93f9928bf", "sighting--74beb692-f27a-4733-a2f3-823431508644", "sighting--aecf42df-9315-4431-9143-93f3428a14a8", "sighting--4aab2a12-6dd3-4992-99dd-d6f9784e2a31", "sighting--d61f9ffb-bd77-4928-8a1e-899c50096e24", "sighting--b59ad60d-fe72-4f69-a13b-567d71ea5a04", "sighting--08ec23fa-0fb3-4b5f-be96-89c449ca95fe", "sighting--3ab02a3d-87a5-40eb-9d17-653622dbbc10", "sighting--a656517d-3884-4f8f-8c1b-c7b71956fe8b", "sighting--d0f47215-0e8e-4f06-972a-d075144406e5", "sighting--c736f40e-4d4e-4b59-bf3f-1a0ea086cae4", "sighting--73a4dd34-baa9-439b-bae8-155ee81fd160", "sighting--d4601405-af29-4d8b-943c-2e8c875cbc95", "sighting--e5ee7d10-99a6-47d0-92bb-f497f0028ce5", "sighting--f73bf255-4c2b-4895-84d6-d626556cf0d1", "sighting--42babd9e-e1f0-42f3-a25a-a95a7c68696e", "sighting--3406e89f-264c-4562-a2d3-6809a9c37788", "sighting--29bf8920-a81a-439f-bb9a-9396736fa99d", "sighting--525cc5ff-9893-40f1-a2ef-d5a77e65bd58", "sighting--4d31755c-81b0-4347-9a07-7bd992dafc63", "sighting--788edde4-337d-4953-9160-dc2b0e7e3550", "sighting--1e6a1b87-05be-4a72-a78d-4e2aba9f7788", "sighting--66317de7-4a4b-4619-a1d2-ec9a780fdee8", "sighting--2464c6fa-d91f-4d37-a678-f710c7ef7b19", "sighting--c97fa640-62af-4be9-a67d-1c96a2da2678", "sighting--7ac9e0f9-a32f-407f-a100-e351184fd023", "sighting--7cbf2def-a412-460a-b052-47b0a3ad2de7", "sighting--9feac385-c2d1-4dc8-bce6-8524a35a5e95", "sighting--31799a27-125c-450d-a4d3-f2daeaef326c", "sighting--8c653b42-580c-413f-a833-041945460e26", "sighting--54afcbf3-e67c-48f2-b5fd-656f9271c6da", "sighting--1b643eef-1a29-4f0b-91c6-03dc5dfba83e", "sighting--76c115e5-91f2-4567-ae8f-39ed9d02777a", "sighting--e89cb1a2-c657-479d-98b8-dd213734e9d9", "sighting--5380e7f2-70d9-4e47-bf75-7d21d0484dbe", "sighting--965819f2-39c2-4b16-a06b-7041fd82c33f", "sighting--098fd1af-dd47-42aa-bc4b-65d0ab751c4f", "sighting--f1d6c0ab-fb69-4ce5-9f55-c6409004e003", "sighting--a7359bbb-82f3-4225-b642-21faace31bc9", "sighting--36e444b7-5ca2-4cc8-943c-cd93ad5a1338", "sighting--a59279b6-7fa8-472d-866c-cc0098430819", "sighting--d5167ef1-a97e-434b-97f8-2616d9b9c1e1", "sighting--d62e5807-1f33-4bcb-8bc7-4f651567993f", "sighting--57c9a2a8-44c5-4121-83c5-d5019f9f6d59", "sighting--f7c71248-cac9-430d-ae43-0555901a101b", "sighting--80d57411-5f5e-4ef5-abe1-b9fbbf2d3569", "sighting--6b5a6798-7eaf-46ad-90f1-937226d890b6", "sighting--fa0bb057-5bec-4cc5-8205-fe0f81afe7e7", "sighting--80f7e272-cc07-4bdf-9336-bf6b6de43bc0", "sighting--8fc03046-00ec-4da0-8202-c9724c404b44", "sighting--8f32be49-28bc-44ed-ae64-a62d0f0943c8", "sighting--8d72d930-d090-4f04-a7b6-ae83466fac11", "sighting--b18e4402-801d-4518-9a6f-5c4ffa5526f3", "sighting--d03627bf-35ac-43bc-9907-39b26f5aaf70", "sighting--10304272-7051-40c7-b675-0bc67fe0822f", "sighting--2e4354bb-ee9a-49b8-a4b2-dc8f29ab4f9f", "sighting--cac4b18c-1eff-413b-9872-554df3b40f0b", "sighting--3ea7f5c5-82bc-4f9d-84a8-5d70c5739395", "sighting--634f82fa-4227-40f7-ace2-042eaa929796", "sighting--a6fe6d61-32a8-407e-8615-71c5804d18fd", "sighting--031f9963-ba53-4be6-9907-52a3f6ab3a6c", "sighting--548982b0-8d36-47ce-b3e4-f20ae0b0298b", "sighting--8c0c45a1-b6af-4b71-8123-8bc40d40b760", "sighting--92535129-73fd-409c-9cff-f34ac20590e3", "sighting--e58432d4-0165-4cb7-9484-f3da085551ab", "sighting--14406fa1-f39f-4d12-91dc-0879e7584f19", "sighting--29521906-5707-4ea0-aa05-7414d4f4686d", "sighting--13706261-9c86-4bf3-bbbd-d36f775b8760", "sighting--4ae68868-4897-41b1-ad03-4739f1033f2e", "sighting--f3dfe49c-2cc9-4979-8650-ae7e827d1407", "sighting--169f7370-61cc-4298-91c9-7c194bf831c9", "sighting--11db0ca5-0484-40ac-835b-d2bc864e5e53", "sighting--7a914cf0-0d36-452b-a43a-5f22a59b81d6", "sighting--baff6a4c-0ce5-40ce-ac4f-4202bce7fc2b", "sighting--be3b0965-3e37-497d-bb32-2f06fdf18f7c", "sighting--ec5d00b7-f333-41eb-a800-7506f74ca73f", "sighting--c09c605a-760b-4237-9867-7872b84dde5c", "sighting--c19d24d2-9798-4b03-85b2-5ea16b7a5345", "sighting--3e602e9b-5f62-40f5-9bec-fc6da0f87534", "sighting--90683abd-b32e-4c36-a4ee-46cee02d4b80", "sighting--72fcaafa-f028-45ed-963c-84083a47c0de", "sighting--ad34885e-cf7b-4c81-8090-d3debe6579c5", "sighting--c5e199d3-c575-4079-a385-d2b22a28c366", "sighting--f0b0a6ca-e818-4c92-b195-cb6fcbba4460", "sighting--5e2e5dea-131a-4e53-beab-96df5ebbef2d", "sighting--f14a832e-8520-46a0-be21-2713684894a8", "sighting--3fc6283f-8849-4492-90e2-e9538a87ffbc", "sighting--25c3a2cf-2d03-4989-a5c0-676b84d5d23c", "sighting--ce142001-cfb4-41fc-9972-622a292a962b", "sighting--059182d5-396c-4a20-b065-e36d561b6804", "sighting--d011e646-a621-419c-97b3-8ec5b7a53aab", "sighting--c80f4ba2-778b-4cfe-8abd-d5bc27c468c5", "sighting--60cde362-44ef-4001-b34a-7b3ef59032a6", "sighting--1274c07e-b7f4-439f-9389-a4ecd4c72cb4", "sighting--616e2cb9-51ef-421a-8150-0de1fac6ac8e", "sighting--f81f0c17-6604-402f-8717-c642e2ca9405", "sighting--1c6bf6a5-65e1-46c5-b6b7-b20ba9be922c", "sighting--92837fe5-de13-40d0-a11c-5cdba0ea2c8f", "sighting--ed8ad1de-8842-4bb6-adfa-ece2fb4dd98b", "sighting--c59d4778-792c-470a-b2f3-29784d48e248", "sighting--f99a699b-cff6-491d-b57a-983f60d598ae", "sighting--244e95f7-d285-4ec7-95b3-fd5be8a03522", "sighting--03febda7-c208-4566-a553-209815c30467", "sighting--b1953094-a116-4a2c-8808-ec5b7c51245d", "sighting--895f7c66-dd28-40e7-9de9-f09827da31f1", "sighting--20df7d90-a5f0-46c5-b7dd-7031012bd042", "sighting--16537541-3881-4898-a3a9-66913816b69f", "sighting--0174d230-e890-4954-b376-042ccfb481d5", "sighting--bac8909d-fc8d-49aa-afb8-9c2a51c90b03", "sighting--9aada555-3571-4e5c-a3b6-e6a900db5c31", "sighting--e23453c0-eb27-4cfe-9109-6c3c56693153", "sighting--fe5eea30-0509-4e66-9726-7bdfbdd8e4b6", "sighting--3afc978a-e3f1-46b8-8a8a-b0e517828bf1", "sighting--13567c43-e4b0-4679-832a-4eea80c92a5b", "sighting--1d844a16-0489-4210-a77c-2301753dd489", "sighting--d5535328-7947-4a7b-8485-68f14c9c0193", "sighting--1eb6ce8d-d009-44c1-88f9-b2edfe80cdc8", "sighting--949b127d-67f6-4c5c-b757-029a38a65719", "sighting--46ff4886-d1d8-47b1-8121-cb315ab90a0d", "sighting--542cea9c-897c-43aa-bd0e-4104e8e93c03", "sighting--27bc360c-c20f-4a5e-8dee-338a88d8fb3c", "sighting--34776428-c1a1-4092-9027-f6a38b28b492", "sighting--3a01c00c-4b23-4fa3-860f-73f541955e27", "sighting--8051936f-c1dc-4bc2-b49e-a60e9fd20131", "sighting--6b1357a1-fe1e-4235-862f-023d42a1b252", "sighting--2c3bd1e3-41b1-42fd-9a7b-f79f727ebc02", "sighting--4919d3d3-7fd0-4fb5-b584-c8e6c8056dd1", "sighting--bb3b6dc2-44b2-4282-9b4a-7d3f242c1eae", "sighting--40bac2bf-949f-4423-afbc-5f0f4ddfa424", "sighting--65593fdd-7768-4bb8-82aa-fa4dfd6b232f", "sighting--f7c3f10d-aa65-4d12-9a55-ab67c0f174b8", "sighting--38bd1a67-5bfc-4de1-87bf-8ff01bc87742", "sighting--b0d87d8a-d485-4e79-93d8-bf274107d0e9", "sighting--a4909ba6-a606-40ca-83c1-fc6b50d4c80d", "sighting--f6543f6a-3f75-4125-bc01-0a54564cbc53", "sighting--9d3fff11-0ce2-4db0-b709-ebdbc31f2c9a", "sighting--588f9861-570b-4da2-b475-13c8169a6038", "sighting--4a317a9e-8784-4a40-82d6-4654d2c81d65", "sighting--958a1147-62c1-4141-a15b-d1a5ac86ed60", "sighting--15df8732-08b9-48b5-b843-cc9f74a70e15", "sighting--a6105bf3-ae7d-4da9-823c-09b82ae1fb1f", "sighting--eddd8081-cdc5-498b-bef8-4918e627ce6a", "sighting--5e3cfe7f-90cb-44df-b3ab-118559479d85", "sighting--79567ba0-cf6c-4bb6-8513-3126b36079c0", "sighting--e7fb84e5-a280-42e0-8d47-b97212f08ca0", "sighting--4e847c49-e545-407a-8f8d-a852f5565876", "sighting--94c5892b-e15d-42f8-83c6-f3aa114f4f3d", "sighting--a11e43b9-2a24-4b8a-9b5d-2041f4c378ff", "sighting--72871e83-c1b1-4b3f-b9c3-915a2b29f505", "sighting--a5ef4bed-d580-4bbe-a0be-644fed3dab44", "sighting--a7c425c9-ed24-4715-b467-54da3f5cbb5e", "sighting--0f955c38-05a8-46c2-b158-33c8881c636e", "sighting--051dcdfb-c5ab-459e-bc0f-de71a2ea43eb", "sighting--2f6518bf-cf7c-4024-9d78-b25d2ab311d0", "sighting--ef52c764-cb66-4ff1-ab3e-e81de058ed1c", "sighting--0423a3eb-177a-47db-bd17-21f7144176a9", "sighting--97521d4c-7d51-44b1-9db5-ccd62b60ddb4", "sighting--c8d1b477-e7ca-470c-b94a-6354fed8f2ae", "sighting--23919469-18b3-40ff-96dd-dc7201ac96da", "sighting--09c49635-9235-4e89-98d1-c194139b7c09", "sighting--bd6259ee-2a0e-4727-b2ab-c4a2f19167f7", "sighting--eba8a422-e6aa-4326-9691-28faa972a0e1", "sighting--a7fc0d99-c29c-4ccf-bd80-e4fc381154c8", "sighting--79b634eb-a221-472d-8a81-89b08f0aaee1", "sighting--52471209-8047-4611-970d-bcc1fb67e31c", "sighting--43d19459-fe06-49a7-98ec-66e06c65b828", "sighting--819d13e1-1662-4af0-b375-eeccacc88b9a", "sighting--01ebeb2f-deac-4e4d-8cc7-84f6b9d2f2b9", "sighting--ab23f612-5b7e-4a78-9297-8df8d379d88e", "sighting--2467925b-3e8f-41f1-ba78-678abf9f40ad", "sighting--7aff6829-18b8-47bf-a24b-2d43df36ce99", "sighting--c19363fb-60df-441b-90fe-3d42cb711657", "sighting--9c45e55a-9792-4fd7-abee-6b2f76f3239e", "sighting--3df823ee-bdf0-4027-a91d-a017ac8b6649", "sighting--2db1edb7-d8fc-4ad9-b78b-9dbb19d99840", "sighting--a57228e6-a699-4fcc-9455-843586adf36b", "sighting--4d8e8505-b42f-4ac1-80e1-7efba4953045", "sighting--4bca4308-fe25-4495-981b-ad6b15df6991", "sighting--ae207b61-e4f7-4471-ac70-5d28b9200cfc", "sighting--4340bd54-01ca-484a-9bf0-8c029963863f", "sighting--dc7205d9-f92b-4783-a76b-e638876a0d03", "sighting--afe2c5a1-2a5c-40b7-b000-ea4779eeb223", "sighting--67bfab69-efa8-4776-8c37-b4d7cd310d76", "sighting--ba858ccf-8a33-4765-b3d8-37306c080a8d", "sighting--008f24ac-72b7-4c8f-a48a-d62e50a4e476", "sighting--6b0fada1-a553-4098-87d9-773fde2d9ea4", "sighting--15f50dab-88f7-478f-b6b1-c7e521fe243f", "sighting--a16a57cb-30ac-4794-b327-c59d318f1d8e", "sighting--f3ccef4f-b3a3-43aa-823f-1310f3093ddb", "sighting--63f66f02-7161-40e9-92d5-aa0b99351557", "sighting--84a1ac8d-6050-4bcc-bafb-4cf80f88ddf0", "sighting--8c34a1a0-3c37-4646-b08f-3f8cc8c04936", "sighting--1be250b5-72d0-41e6-a15d-9de72bd8391e", "sighting--02c522e8-9f88-4368-81b5-d0e4abc9c2e5", "sighting--0601b11a-aa09-4b41-86ae-d42f0aad5a68", "sighting--1f3fcb48-c073-42e0-8cfa-6c49b0a5bea8", "sighting--f72224cc-95be-4a2a-941d-0de9841fff7b", "sighting--a8fa0824-e694-4742-83c5-46e615687e01", "sighting--4bb9f186-aa15-41c5-be24-e9534ecb168f", "sighting--1bfcef01-6523-418b-b6b2-112795d41216", "sighting--c9d336cf-e849-414e-b5cf-9f436307938e", "sighting--1a6f8701-852a-411b-b826-5640cded9d34", "sighting--40f83f1a-72cb-4587-848a-88b762e3e0df", "sighting--e83836f7-c5d1-46ee-afb7-a9154aefdc22", "sighting--300148a2-bc7b-493e-b87b-1f3f9bc89424", "sighting--395896bd-d0d6-41ab-9bbb-b4943e589700", "sighting--9d021cdb-009d-4743-8c33-ab4e54cf224b", "sighting--c8b3b0f1-0bee-46a0-a773-6c721eeb24d7", "sighting--c195523e-32c6-41fe-a46f-8ee29ab34072", "sighting--f38ca7dd-9565-4ffb-994c-073c85792ee0", "sighting--cfaca13a-28f8-45df-93bd-402a12338f58", "sighting--80d9064f-7313-4e2c-8238-35f6bd4caa52", "sighting--89e8771e-27af-4852-804b-16abf7e80fcf", "sighting--ac91f00d-e2bc-4dba-a64b-c5d85fa5a640", "sighting--0111c831-07ee-48fa-bd82-85fd29e3ee43", "sighting--45a0b440-2653-4ea8-afa2-45d86f67dccc", "sighting--f7c6869d-112d-407f-810c-9198984bebfd", "sighting--9fce8201-d33b-4154-8b80-0551297bcda8", "sighting--e88e8259-0934-478d-aa67-f7147fbb9c28", "sighting--5309a404-13ca-4d47-9add-f44b07c19a96", "sighting--61bcbfdb-c5c2-4c9f-97c1-0aa4c849c42d", "sighting--ecf71588-ef07-4340-86f1-10169ce34ff6", "sighting--f3e28c0f-4a71-4101-97df-30c5d280f7c7", "sighting--58ea6f4d-bef1-4a56-8efb-8e7abfa5bb1f", "sighting--ad0742d9-7e3e-47a5-968f-614543716c27", "sighting--fb643045-282c-4dcd-8f79-66308b39e569", "sighting--7e530695-3eb7-41ee-8e5f-c462252a9d8d", "sighting--85043c7d-2cba-4a8a-b94a-c40675a66bae", "sighting--839001ee-0698-494e-b3a3-a9e568e367da", "sighting--bc93ba46-19d1-47c3-af6c-3c3815d27c45", "sighting--1ef541f8-a727-48fa-a3de-c37e59e7ec34", "sighting--063159a8-a4be-4ca9-8110-454c59241335", "sighting--2715cda8-1644-4cbb-ba45-57914357bd0c", "sighting--e57c5bd9-f6a5-4c30-9e4e-17e369b34c59", "sighting--f759f691-5f6e-4e0c-9f24-d985eb3787eb", "sighting--4157c26f-2f76-47b1-a2c7-e08e1e23a252", "sighting--650e7021-270a-4793-86cc-54672fe32b6f", "sighting--8e87b278-b1f5-4939-a3c9-066060469298", "sighting--3a45b5c8-aecb-4c7e-b15b-96b24ee6c1e1", "sighting--373a9920-ce43-4917-992b-3ee9816c336c", "sighting--15e90e2c-b775-4576-a673-f657b1fc838e", "sighting--c61b389c-fe13-48fa-a7d8-103ceea090a4", "sighting--74cb3901-74c7-4c0d-98fe-fd9fece52bb3", "sighting--c73651f8-fffe-48b7-b8d9-5c30be03ca21", "sighting--ef7c98c3-404a-4499-be3b-1fe40a43285c", "sighting--78ea845b-8562-4bf4-bfc1-6e4a10f6103f", "sighting--034852f7-a18b-4490-ac0f-59de6fbda397", "sighting--eb2391d9-b195-4fab-a88f-505f4c7a4a04", "sighting--384f753b-dbd0-4960-9736-6a2d7fb314fb", "sighting--7833d671-7ede-4ea4-8a7a-a280dc916df3", "sighting--d7817944-df06-49c6-ba17-079b37f2e8d5", "sighting--80d17f42-b9be-404e-ac5a-f0ebd8aaaf33", "sighting--1c74b14b-f323-4b51-b38d-c9c16c5c25ae", "sighting--62f0cbeb-dd80-45fe-933c-b5b386c90b0a", "sighting--0eb8ff30-5521-4694-8a3d-8561401c4737", "sighting--052b97d2-231a-48fb-b51b-c06644b4663c", "sighting--465dc7f1-3ca6-4674-8ed8-65dcb5a29be4", "sighting--94d11e2a-21b5-4c45-94ff-a40478b7033e", "sighting--b033562b-cdd9-4363-8cc9-5470c15dd03b", "sighting--c789e4ef-0985-4879-8644-5af1497a77dd", "sighting--32bf8fa0-00c6-4040-96de-74b6c2eeed0a", "sighting--e6fba4e6-e852-42bd-b257-61066cd37452", "sighting--812bc42e-11ca-4953-9bda-d43533498554", "sighting--d95bcc70-a1db-461f-806f-60e86cc7a106", "sighting--1c333cad-8e11-44dc-b393-addf5a6ed6c6", "sighting--2de0f31f-423a-48e7-a528-94c063f0bb1c", "sighting--8b31810c-55a6-422a-838f-250a763a83cd", "sighting--2960c1b1-948b-4ecb-aced-197f3ed3f45f", "sighting--cab49fee-c8c2-476f-a74f-5b9e6fdf8550", "sighting--5b00ae0f-2f80-46a8-99b1-651898e9207c", "sighting--d74fc969-1cfc-49bf-b11a-09bda8e479c2", "sighting--abdc58fd-3747-4838-b687-6cd0d61e46df", "sighting--67fb40f2-5670-4ffb-9baa-857ae29d6b9f", "sighting--2562bbdf-0165-406f-bb05-8c9537963e99", "sighting--0d9e5c9d-311b-4610-93f6-69408699645b", "sighting--a3c71230-22b6-43f9-b9e8-3f00471cac62", "sighting--f49fb273-d573-4c86-9f70-318e40b88d60", "sighting--9d287f5f-aed3-4747-b016-b7c51a3673cc", "sighting--b50f7fab-49a9-4d4a-a139-c317b429939e", "sighting--aecc293b-3979-43ac-834e-f4ecf028ad0c", "sighting--62a05947-8fc5-4a4c-97aa-05eb4412fce2", "sighting--42fb0c2d-48ea-4d2b-beb7-02f2c4b69785", "sighting--d7401b23-936a-474e-a926-903ea856b3e3", "sighting--e3944734-550e-4098-a826-b4f07bb9eca1", "sighting--aebe33e5-697b-4536-82d5-8a89649091a1", "sighting--7d10d3b5-2d71-492a-baf9-681dc8c212f6", "sighting--aa3d340d-078c-401e-9d5a-870cc577d59b", "sighting--0df9b77a-75a1-4a75-a459-45d93b741d89", "sighting--d0bc4e33-4058-463a-9e16-7f91ca0ea88a", "sighting--81b2de63-c759-4860-a3f4-ec53a56a2063", "sighting--d0df1467-3d1a-4b7f-93ce-487fad967b55", "sighting--20779da9-04a8-4462-a918-238d30456b61", "sighting--9e825d4e-b0f3-4a6c-9cb6-f97ce612989b", "sighting--7e11759f-f675-4a16-bafd-2984d13f1dfe", "sighting--1e4ae80c-f566-4c88-9dab-e61c809c238e", "sighting--b10bb75f-1311-47ca-ad8d-38161e020a7e", "sighting--f014010c-c324-41d1-895a-4ecbed0ade2c", "sighting--ca4c2eca-39bb-4b2d-b45c-4acf246c0c10", "sighting--8f1f2b55-f974-4138-a3f8-46a64d86caaa", "sighting--a06a2fc3-59fb-4779-9be4-066c564798f7", "sighting--182ae29c-1a5b-4d01-a8cd-97257e1c0d8e", "sighting--1e821fb6-e118-462a-a052-d219bab6e147", "sighting--ced84427-d470-4476-89e8-fd020997876b", "sighting--14a652b4-43b3-4dd1-bfe7-ef8d3bd40845", "sighting--eb462e0d-5af2-4e32-9d6e-cc83a0507964", "sighting--cca50d7d-5053-4cd8-9cc7-259c499481e8", "sighting--b77b9eab-ce59-4fae-b1fd-9ac73ba593d1", "sighting--1f1f5c8f-ecf6-44fb-bc67-9348c43a412f", "sighting--7b58f635-8f16-4643-a9a2-0e8c030f37a8", "sighting--51194ecc-50e3-48a4-aaec-bfd0032effc8", "sighting--6cced9da-baa7-46d2-9ffd-c9e4b226a60d", "sighting--a012ed8d-882a-48a4-8804-b602be529136", "sighting--497616f9-a7dc-4b87-bee9-8ff7d1212eb5", "sighting--217e09c1-af34-4abf-aaa0-16159622a38d", "sighting--19c6d59a-4f6e-45f5-a9f8-1684863cc48c", "sighting--a7c087c0-67f8-49bb-bf8b-cb8b4779b39c", "sighting--7dd0235a-16e0-411d-b107-74f1f3385f8a", "sighting--075c5f62-dd5a-4423-a8f3-3a289fb82d1a", "sighting--7e9ab426-85fd-4021-bd74-13585f698148", "sighting--2f4092a8-5bd2-46e4-832c-fa8dab0ad82b", "sighting--95f81f08-111c-41b7-a613-25ae85577cfd", "sighting--169e2bc7-a31d-495d-8100-211b5671a53c", "sighting--b1dc4839-2ba9-4479-97c2-8c1ebd202166", "sighting--fe0234bb-1ab4-4951-acb6-df7469a2d07e", "sighting--eb222e6a-fd34-4af4-81b7-ae9a68560fe2", "sighting--0a3f61e0-efa2-438c-9bac-8b3c8bac1b5d", "sighting--9eb1a957-33a2-42de-811b-7bd3e53524cf", "sighting--641ebded-284d-4061-8b67-f58fc0c27eff", "sighting--b883be24-ffdf-4683-9fe9-c1cd0aa851fa", "sighting--6b1f9399-1d49-4a5b-81e9-ffe8e85bd8c4", "sighting--4c798105-7721-407b-8f7b-d8e2c36f0396", "sighting--cb45bd59-c1f6-490a-92cc-997c40c6e465", "sighting--7176a893-c3e4-4b2c-b420-cb26b26c334a", "sighting--95efb15f-ac13-4241-86f9-30c493e112c2", "sighting--089e96e9-ef0c-49d5-b11c-49eacfaad624", "sighting--e1b1c6f6-93ff-45e8-a0b6-4f9c134c3125", "sighting--a20a4c3c-d4ed-480d-8ba0-af2c2cd48d1a", "sighting--b41be46b-e1e1-4924-b315-a3743ae53815", "sighting--331241b6-5111-4f88-ac32-64a50dd4c1ec", "sighting--901f553e-8f0a-49f4-8cb1-6e91de3e0f17", "sighting--f9a3ce6b-9430-412c-aa3e-1bb0fe2609a6", "sighting--954d54fd-6322-4b3e-8aa3-3c48132782cb", "sighting--52967175-292c-4096-9d07-a809e67c8bb8", "sighting--564471df-4bdb-4fdb-9206-54a4dc8bb153", "sighting--60a2c1ca-37db-43e1-bac1-6692b774e546", "sighting--507e1ba3-80b6-4fdc-947f-37a87b7cbaf6", "sighting--ed0a5240-f128-4e88-bfb6-783995486ba7", "sighting--5f8793bd-f852-489c-9ace-d23a10790705", "sighting--f5f6e085-33e1-4e6f-951a-23161f1f2461", "sighting--7e528aca-38f6-4aff-9df4-0985aaaa7e6d", "sighting--ae70361c-55d1-49bf-b927-97cc2213d675", "sighting--1fcdcaee-74da-48c4-a911-ace67c00053d", "sighting--9603a96b-fe4a-4ca0-8bb8-fbc516aa86f3", "sighting--ab13ae3e-c64d-4ea1-8dbb-172e5ea42561", "sighting--0d5036bc-f221-467f-893c-1ac187a9edad", "sighting--be6ee9d0-3604-4113-b66b-83475f6e17b0", "sighting--0fd3b6d0-9282-464c-9042-5b5f2c63d3f6", "sighting--4b98a6e1-5b44-4f1a-9846-03edbbe18d51", "sighting--6ad759b0-a06c-4f23-acf8-9122150cb241", "sighting--e402b318-7d49-4f3d-9106-a42adbdb84b1", "sighting--1267d656-8acb-4b9c-ab58-f7ec5c23c209", "sighting--d2d53fc8-4212-4bca-afa6-808b6890ce3b", "sighting--0e803c4c-3dcd-44fd-bdab-fea47174560c", "sighting--f46fd039-b7a3-48d9-989a-24c139c3a7e4", "sighting--f033a498-fd43-4836-8a3c-39b22e536845", "sighting--02010834-0903-454d-9424-6c15b731c703", "sighting--f49d4ef2-0a95-4b33-85d6-c918b583634a", "sighting--fff6f4cf-edcc-4998-bd53-8a27e3152b69", "sighting--16a96d58-2eca-405f-aaa1-ce6c4444346b", "sighting--83f1d031-39f7-4726-9c1f-755a5a10c6ba", "sighting--30c481d8-3af4-4d65-8da2-dc11b0956b52", "sighting--1476257f-7c7c-430e-bb42-a9a0b5ae95aa", "sighting--216830bb-0aaa-4aea-93c9-48c49fdf7404", "sighting--e4e760e4-268e-4f71-8f25-6fb71ad67099", "sighting--dab3a3eb-bad4-426a-bbe9-710802588523", "sighting--aca446d0-fd5d-4c8b-873d-07a0b073b042", "sighting--4ac25800-f348-4a35-addb-9060a7d0270e", "sighting--7af30035-b819-46c0-b90b-9d71a221d94a", "sighting--b85240de-baf7-4fac-ba90-6a3a46d74090", "sighting--9e23ff4a-e337-46b9-927e-9d0a64185571", "sighting--de0729e1-a44a-4cd0-8c0d-c804d49deb69", "sighting--ed05b398-ce6c-41b7-af39-e8e0c35b49a5", "sighting--2f71eb3b-4f37-4877-a9cc-da14c9df94b4", "sighting--4d296988-3f1b-4995-b17f-a86a0902b08b", "sighting--60742ebe-0a7a-4e84-a0f3-bd16abd39822", "sighting--7fce3f43-3128-4559-bc38-e258f8fb3faa", "sighting--6c383765-001f-4d62-95e1-46e94d228934", "sighting--6e0389b7-a9f2-4e8d-bc53-63c8386bfa2f", "sighting--1bb35101-2903-4d48-ade1-f06608ccfa09", "sighting--25450c41-4b77-44af-b83b-0b1e1fc4b572", "sighting--a0d385e6-aa9b-4d09-a224-3908ed510a7d", "sighting--1408b872-7c26-451d-9858-d73a8a3d5d4f", "sighting--3350950b-91a9-4dfe-855f-7a00e579e72b", "sighting--ad00f08c-a46f-40b9-bbf9-8d6628859dd7", "sighting--bfe2a488-e5f8-4e0d-95b0-543e036e8393", "sighting--517fd83b-09a2-4be4-a416-57c84802ceba", "sighting--73b0bbae-1fae-4c88-b194-f69741ed87e3", "sighting--fc17ad53-0454-4520-9402-8c5374b23f69", "sighting--a9515dbc-b4d3-4f28-8eb8-659412b23e40", "sighting--a38a743d-0616-45c7-aead-bcd9205909dd", "sighting--08e59f80-725b-4ba6-a4a9-985dd8ce1698", "sighting--e96a7e8d-83f2-4742-9189-918c7bf46d0c", "sighting--15f64e46-29e4-4224-b990-410f60a6c43d", "sighting--681bb7c9-8918-4402-94af-347000588f42", "sighting--1fc18ba8-3974-47fd-b5b8-e90cde8a67df", "sighting--bed987b0-ec27-40bc-b112-66d3d0745022", "sighting--2318b7a9-afe0-49c8-962b-af73ca548a06", "sighting--b2d1f716-4453-448b-bfd1-bb2c37877be4", "sighting--315342ac-6364-44f3-96ba-7ed845fdacc5", "sighting--cd969053-4331-4aad-a94d-61d4223be89c", "sighting--f9b19ba2-7080-43e6-a37b-8a717aa5f2a6", "sighting--dc1bf630-a03f-4f11-85ec-5c23619fe3df", "sighting--7f948508-45cf-4924-9c0f-ae74530f45b4", "sighting--eb3b2d76-9c50-4f9f-94dc-062908c2b774", "sighting--c7ffa504-32d0-4617-8bc0-d0396a126ee2", "sighting--0a60eb81-4106-4602-8fd8-b4f1f93601d6", "sighting--b7ec8714-7c54-4162-9939-2a32c9af4861", "sighting--87d730b8-0999-4e80-94f8-36dcb87db086", "sighting--04281837-b64d-431f-8287-5fc7afc2d938", "sighting--891a0b0e-6fe2-4888-b89d-4b845b5b9b33", "sighting--0a6e51f7-304f-4ac8-8dc0-0aea791f879f", "sighting--12906aa0-ed9a-4323-bf93-64e2ed00ce38", "sighting--8df1a935-4e44-4e59-a534-b68d90b93840", "sighting--a0d38fbc-e103-4fb0-8960-7916a0edf861", "sighting--f6664276-348f-40bc-8e49-68b99bb7c610", "sighting--e2c647b1-2ae5-43cc-b095-442ead62ab49", "sighting--ad9f1ecf-32cc-412d-aa68-fd81c535e787", "sighting--06acebca-4c81-4a7f-88eb-11306a9e110c", "sighting--fb0c0ac8-a62a-4666-a46c-7a39f415c166", "sighting--4625aebd-1127-4e58-85a0-1cac4c2f9dfe", "sighting--227fe003-d16a-41bb-82b8-9a50ac86ba42", "sighting--ccec295e-b7a6-4e1c-84d1-df043a4342a7", "sighting--41983900-6f28-46bc-94ab-170a6adfc8ec", "sighting--ff8acaf0-990f-40d7-a0a3-b72ab2ecff4c", "sighting--5b04dc8d-cb3e-4acf-9029-277ad0ccf093", "sighting--6b48301d-3b8e-4c9e-8304-413a30b7155d", "sighting--93c97ec3-ba2f-4f5d-9f20-7dd6740dcc21", "sighting--dcff5a34-f1df-43ce-a65e-a9ea0af56873", "sighting--0772b01e-791d-4e28-8449-06a3af724185", "sighting--82c17e22-f47a-4d30-8987-b6791ad96ba7", "sighting--53361e37-5948-4077-9eb7-049e0f84d5c1", "sighting--bac057e1-b8ed-41c7-b672-04d026518336", "sighting--2d4c4d08-30a8-4b47-86ae-29a1581a03e9", "sighting--9af9ac68-fbaa-4189-89b3-d4b4a7e96e84", "sighting--6df44fe6-2690-4832-a5e0-0100dce83bdc", "sighting--a0d86067-3753-4633-815a-a082d8866ec1", "sighting--3d956b49-3ad1-4db9-82b8-f1b25fd5f083", "sighting--6596ec84-840b-406e-88fe-5a0e7b3939b4", "sighting--966c1bbc-de73-49f3-a1e7-fb7e061674e5", "sighting--7d267508-792d-49a7-b0c8-0bc7b3c54a37", "sighting--0451a20e-ddbb-478e-8caa-ce25f7173295", "sighting--b1f48edc-0670-4d2f-b0ee-4de0828a0a04", "sighting--f5bb7294-f73d-47dd-9951-d972fda0e61a", "sighting--b68cc362-6414-467f-9f12-5b572e9c457a", "sighting--9ab295d5-4cc7-4f4f-9c1f-50e08aef45fb", "sighting--aac59edc-06fd-4eca-b521-d5b9880eb43f", "sighting--76fc7428-5848-4812-98ea-d4c50eb96c62", "sighting--a456a14e-767e-493a-b27e-60ca8a12b639", "sighting--160f2c9f-1313-49a4-9c4f-f4b077be55e9", "sighting--298cac1c-bc6b-44d2-b28f-59ce91c1d070", "sighting--096fa37a-989c-4a75-9645-101659285a7b", "sighting--54f17a21-6217-4357-8e3a-bd9c8d94b90d", "sighting--7401b0ed-99ec-4901-9b30-6f5b1afa7286", "sighting--965afa16-ece5-4962-a9cd-fd7a5d8755a4", "sighting--f2bc8d4a-d46e-4e9e-8a48-cce17ca3d3b4", "sighting--0ef027a8-55d6-4113-a704-8ffd9f3f867d", "sighting--be6b4add-616d-41d1-851f-da74e0a334f0", "sighting--60fa14d6-2e05-4744-858b-8879bfbf524e", "sighting--c25c9c8b-b04e-4804-b8bf-7cca120924c9", "sighting--d3e43a47-b07c-4fcb-8488-7c174e8b6581", "sighting--44d744ae-55d9-45f5-9b52-3989a2a441e3", "sighting--a4fcf601-0355-4506-a69e-c7cb62a16a97", "sighting--0acd19c3-e3af-4540-af8e-7735789954c6", "sighting--60d127e2-8b73-4000-a64c-3792bd9f39c4", "sighting--cf181ac2-0cd0-4f0d-9dfb-47d3238f7fd8", "sighting--1f4e25ad-098c-4d90-bae0-56fc52ec83e6", "sighting--263d4f61-51a7-4f09-98a2-cb2919cd9c08", "sighting--58a1afb3-d69f-4d4d-bf44-55f8d4bc603c", "sighting--6163c8c1-0d98-47cd-9c60-139267aec35b", "sighting--3a5efea5-a163-4471-a727-c12e87fb0e12", "sighting--9d4646b7-f658-4f6e-806f-fe40c33b0176", "sighting--8de422ce-bc0a-4eec-9761-1a63b7796a44", "sighting--650ffd7c-a957-4912-8ddf-940415d9c46b", "sighting--6ab025a2-da59-491a-8fa0-92b434e6452a", "sighting--29a0f3eb-e2c7-455c-9598-2cbc89b91dbd", "sighting--3e9475ef-045a-466b-a0a2-903bedd6731f", "sighting--40347764-8d0f-40ea-aa84-8a6556285b5c", "sighting--e7871b5f-3734-4023-911d-efa7ab38807a", "sighting--f6c9bed3-b92e-4040-a569-8f73576dba44", "sighting--2bc51037-5d0a-45f0-9fdc-da816f36bedb", "sighting--f3921517-8597-4ba2-a795-4a8dadf3546e", "sighting--52e3b53c-f318-4a34-8163-70b49f3dcb8b", "sighting--f002b248-3901-429d-90e8-b90766103b6e", "sighting--81102bb0-9a6a-4eba-87d2-9a4623035985", "sighting--c4e98d56-7f9c-4170-98ae-8ccc67410571", "sighting--b64628dd-6626-4f2b-938f-70226913b001", "sighting--85c4950f-9f41-428e-a164-0bf7bef79d60", "sighting--8ceed7e7-ddfc-435c-a500-be820f69dbb1", "sighting--17047ebf-ebad-4fb3-9a0e-39f5ebdde3a0", "sighting--609ec5bf-7ef4-4cf9-b68b-906413c73276", "sighting--1f0fb03e-4bc9-44cb-8d35-085635cce081", "sighting--a1dbe75f-fdc7-4073-9d00-a646cf5c1729", "sighting--d28c4af2-b263-4829-9af4-0b2e3e40e658", "sighting--bb79e630-6829-4d68-a766-d6ef3bb1f883", "sighting--3fd67517-2c15-4add-a544-c60a242c2a23", "sighting--d6d27179-99fa-4020-91d2-59812447b1a0", "sighting--4dd3968f-f248-4fd7-a4e3-e296b5343faa", "sighting--2c7b1a4f-d3c8-47d1-bfdf-0d1dfd14c559", "sighting--fd006f6c-b704-4d3f-a6ce-9c27814d9a27", "sighting--e0c90be1-8e10-4ada-97e6-aa0e15d73153", "sighting--8bafb022-090b-41eb-822c-e5c1214869cd", "sighting--51d79d0c-f88d-482d-904e-874351d92b9f", "sighting--990b46b2-dc08-468b-aecf-7fa78290290b", "sighting--de96b2d7-656a-49e8-a660-e69905e8715c", "sighting--da761306-7fa2-422f-aa42-9b516d82b4b1", "sighting--d11b59ca-16fe-4a65-a921-ce6383d0355f", "sighting--fe7ddf9c-ba0d-4c25-b3a7-e9c3addb4b1d", "sighting--67184c51-e115-4e1b-8aad-0ae932ba5228", "sighting--bdf079cc-3595-406c-b978-4bd3ce586a40", "sighting--b02822f4-9b48-45f1-b4e6-b1eecf969aeb", "sighting--dd759e08-f39f-4ba6-87cf-dd9a72a47f22", "sighting--60e32d5f-26d7-42bf-afd2-bf77162d7b7e", "sighting--6fe78153-9962-4c20-8edf-6c871af7b44f", "sighting--d7207d5b-55a8-4e9c-b709-31eae1a31229", "sighting--aac21fea-1e74-4794-bc4a-db4c05a4680b", "sighting--10be7510-03d6-4bce-9737-7bad751673a1", "sighting--c09d0e46-1232-4db2-9cde-ccf1de9fd755", "sighting--5d318482-9c37-4bc5-81cb-19d162a7a456", "sighting--e610eb5a-4a13-49cc-8688-61f1ca73c1cc", "sighting--d08b2c58-ea1a-4f83-b0ff-63f39de0439c", "sighting--76a524e3-0197-41ae-888d-eaa772184ee8", "sighting--341d4877-4305-4a97-9d9b-84f5cede5571", "sighting--2361121e-7bb1-46d0-ad2a-1ba5528d8f2c", "sighting--fd58cc51-0314-4a5a-845b-8d21dd7ae084", "sighting--136cd09e-d0af-47f4-af17-0ed7e687259a", "sighting--512d74cd-e666-4796-8499-e671728cf415", "sighting--53443643-a5a7-4679-8dfa-4ab00929dcbc", "sighting--0d75849f-e01a-416f-a40e-10e7e2809284", "sighting--63da7a02-d754-4c95-a3f5-85aec239ed86", "sighting--17895378-1c40-4d69-b8a9-8843136bf18f", "sighting--0d0d27fb-9a85-4665-9377-017b6161a4b3", "sighting--64b3fe37-ec34-4e8a-9d3d-068f4b01bf12", "sighting--d4dca205-9809-44c8-880d-50afe350531c", "sighting--8359ac45-0dbe-4701-b2a6-3f01dacf77cc", "sighting--2e344213-44d4-4de2-af4e-a4f5a8ba4c7f", "sighting--148c2334-93e6-4bae-b527-73c0b0b484f4", "sighting--88760b40-7f84-49d7-ac24-c7437c2cc6c6", "sighting--3dd38357-62d3-4d55-a742-52a6734a3de9", "sighting--ab736504-2fec-446c-a849-5509e0db7f3f", "sighting--4f6cf283-20a3-46af-b6a9-bc052caf448b", "sighting--a3bdf96a-75c7-4a59-a065-90c056704c4b", "sighting--befe2bdb-5b00-4daa-a693-b30bb2428267", "sighting--f4e34681-563a-491b-b814-aed52efec931", "sighting--38cd985f-3635-4c53-8063-cee0bf362721", "sighting--71150e5f-041e-4c98-bd92-6e8b954d6603", "sighting--c6787d7c-d1cb-4e7b-b9a2-9c253d564403", "sighting--8d7e9273-00bd-40c8-aa3e-5288b6696362", "sighting--86a5a009-fbc4-4e6f-8e6f-b89748a5b8b2", "sighting--b73b29c9-d37c-4c0e-87bd-91a05e2711ed", "sighting--071de6d6-78d2-40ce-a289-6ff36f623af6", "sighting--890792bc-1842-41f9-9c5a-ed02cd5f5270", "sighting--43688197-b131-4893-8174-1acecb5f2af7", "sighting--6ad57c59-b8f3-4d87-bd14-07cd28156069", "sighting--81b4e9e3-14d3-4ac0-bb87-49565f9c81b8", "sighting--3bd8e73e-2a23-4127-9d7d-769402b804b2", "sighting--d6a9a402-95be-46c9-a39c-e04dd7e42dda", "sighting--52ce81cf-2662-4218-a2dd-38fa38b67703", "sighting--db26185b-082e-48b1-9ca7-5fcfa42aa3a1", "sighting--af542044-0481-4767-be82-89e71ad3d0fb", "sighting--4bb22f22-58a4-4f93-bebf-4cfc205b3ffc", "sighting--a4157051-8648-4f7c-8f12-236a16dfa5f4", "sighting--6e256bbc-8d04-4c2b-9280-3ccdd0c22433", "sighting--9d7f02df-33ba-488d-983b-0def53ab41ed", "sighting--d9bcb2cd-51fd-4e8f-ba96-49f7b7d2b3b3", "sighting--92c8208f-1c15-4fb5-9786-85bae1ddd479", "sighting--d8387336-65d7-4b5f-9dc6-8508e03cbe12", "sighting--4385bf3e-8e81-4ca1-9aa0-22efcd2b6fe4", "sighting--2d62fb95-3a32-4858-b2db-c57a5683646c", "sighting--32a6589c-86ea-43ff-b045-1eaabbc8bfcf", "sighting--ebc5f314-6da1-478f-9c46-bc701d70dd93", "sighting--679186aa-c437-4e5d-9279-9f15dfb1e944", "sighting--164e9414-e60a-488a-9f1a-72fbaaba4989", "sighting--da6b282e-c1d0-4be2-ba1a-6f5d30c3b6f5", "sighting--38ceb0d1-e6c2-413f-9481-df230fe615cd", "sighting--8c3706a5-1af6-4dd6-a502-0df78d3aee05", "sighting--eec8eb25-1e06-4679-bea6-983765bc9adf", "sighting--79c7c0de-0d5f-4df6-8756-c700e99635dd", "sighting--a6539dd5-2023-4c94-b654-943be7443a77", "sighting--3ee3109c-1ae6-45ed-9484-3731c2c8a9e4", "sighting--d4eb4560-0e84-4ea4-a346-5690a4c65b70", "sighting--6a02b9c4-6ab7-4ba3-a5e4-150f1224cb0d", "sighting--3d96206b-5346-4ac2-9ab5-d70ab2328a9c", "sighting--ac29da3f-8baa-435a-9722-9da32a76252e", "sighting--3b39a7fe-c9e5-46de-9b36-8a3080b1d01c", "sighting--83f50a71-bd83-4ea6-a548-90672380f3b7", "sighting--c2081278-5dc8-4f01-9372-4c531315ac91", "sighting--4cd1fdbc-fc60-473f-8a68-5e1487c6a0e3", "sighting--34535ce2-3bf0-472a-b966-17b46df06205", "sighting--05a6c4c1-c21f-48be-8314-cbe7a8054bf9", "sighting--69aade5a-129d-4c2f-8ee9-0ad3602dc4b5", "sighting--ca7ce8df-46e4-4093-aeaf-ddc6d24f8ed1", "sighting--b35429d9-9952-43c6-9584-bd18fa063bc7", "sighting--95d3c053-4c68-434c-9e9f-604e47982338", "sighting--ca7167c1-7a1a-498a-b7d3-6ecb01d51526", "sighting--3758c493-0c66-4e93-992a-2fa2a4d2de07", "sighting--e20737ab-847f-4bfd-b863-bd1a05990597", "sighting--bd339baa-9547-423e-a2e2-688d65e55f42", "sighting--0abcff00-50c6-4bee-80c6-3e308a896710", "sighting--48723584-3435-4996-b1aa-a7c589132c51", "sighting--ca689ceb-4f18-4278-86b9-04d1e464fe70", "sighting--37028e20-ffe4-47ab-bf9a-dade037117ec", "sighting--e3a4cbbf-435a-41dc-8951-e36760487b11", "sighting--4c21189a-e793-4e1a-89f8-ddf6433a039a", "sighting--d96c3746-955e-4f23-9877-c4ae2beb9ca1", "sighting--46d8965c-f133-4cae-b0a4-9fc40d782931", "sighting--95e85f17-cae3-4ca5-ab3a-e18aa684d855", "sighting--10bee78f-299f-48f7-bc85-e08997966ad6", "sighting--5b2cae3a-a4cd-48d3-9728-d441c070f264", "sighting--d10457e6-c637-473f-ae79-f50b4a6ba695", "sighting--9414813c-0cc7-4fd9-86f2-2a457bfbc640", "sighting--da811691-e971-4b0c-af77-c87e133f648c", "sighting--e0e2b985-9c40-4617-b278-0d5a004c580b", "sighting--001446da-e42c-47c1-ae4b-fe03d3c406a1", "sighting--f55b4f06-f7ee-4cbf-817b-a83ee4f9ab44", "sighting--45e0e62b-7a09-4ccf-b56e-6c7a3db906d0", "sighting--64200ed5-4ff7-4050-a4d3-282b1835ed54", "sighting--ad88e6df-2858-4d4f-a8a3-05dad9035fbe", "sighting--27188bba-0fc3-4b5f-aa80-495c80fc93c5", "sighting--32222c69-9efc-4189-84ff-28bdcf46c38b", "sighting--9724f82c-747b-47a0-a68d-19f0fe3f6e3b", "sighting--fdb8d803-a664-431c-8ffe-5a01fb94632e", "sighting--9909e029-ae9d-4d6d-90c7-ea19fd0eded0", "sighting--baa2addb-1a9f-4300-af99-2089d30646b5", "sighting--bc4c7f2d-533e-4d87-b60f-9207caea1563", "sighting--e99fe09d-4cbb-40a4-8745-f35571a68061", "sighting--2b836be8-082d-4a96-8a96-eba4a731374e", "sighting--2ed4ec3b-ced6-4072-894d-5f41213a7311", "sighting--87bd763f-57f6-4b13-b23e-b31c7eddbf4b", "sighting--0c899c80-de70-4533-8012-fb7e39b35832", "sighting--8b1d6cd0-b23b-4747-8283-1de0ef39c8aa", "sighting--56b43f77-36e1-4847-8d3b-d0e83d0ae905", "sighting--57626eaf-7470-419c-a34c-4bb53c72ab59", "sighting--5081c2e7-0c88-44df-9011-568732c265c4", "sighting--e0ccb827-47ef-4a43-8324-e157efdd74eb", "sighting--10fcd452-b559-4065-a052-462238dec4ad", "sighting--41aadfc1-94f8-46b4-b0c4-d3a6f6f32fd4", "sighting--9365254f-fcec-4647-8a7f-6207bf12b93d", "sighting--8bd384e5-cecd-4a9e-a0bb-716ab0d1494a", "sighting--a5e9d8af-3aef-4708-884a-45ef623420f9", "sighting--fb641c00-6f4c-4313-b18a-7bee33577c42", "sighting--3b54a3f2-1b8a-4c4b-8084-dca8baeefc98", "sighting--fbac7666-0e45-436a-9ecc-737b75692d5b", "sighting--c413519c-924e-473f-91e5-08b2da008203", "sighting--7de9fa3a-8d68-4450-bea9-b77c8459f3c9", "sighting--98306e62-1faa-440d-b976-501d3567bf1d", "sighting--cacd82a2-ef6b-4681-a353-203a6194f3a7", "sighting--6958b5b5-df5c-404f-8146-bf2e99a627b8", "sighting--7a126b39-878d-4301-a7fd-06cbbcf059f9", "sighting--745f6e18-5f8a-4334-a652-bc1a4f9295c4", "sighting--248078cd-9a6a-45bb-ac7e-98c6bb346113", "sighting--4af40ff1-d5f0-4f9a-be25-80a39494cfb8", "sighting--fe2d71d1-402e-47a9-8eea-e4d38f776d71", "sighting--401cdaa0-5395-4cf9-bb3a-13db8f860fd3", "sighting--175c1179-79f8-41bd-8e7a-beb824d3cfca", "sighting--dbed4b70-24f6-48a4-a3ff-9a061888f553", "sighting--b276b87c-a767-40a9-a90a-c020440db2cc", "sighting--82973b41-ef27-40aa-acf9-14119f2f272d", "sighting--c990f7f2-7982-4510-9dcc-9daf662f3402", "sighting--7ae36e65-9249-41cf-be12-3bfa2fc9698d", "sighting--f4d60ada-2687-4391-bdcf-39fe55f4e1e5", "sighting--aa8d308b-6919-4637-8fbd-ec5085bde343", "sighting--0cd65201-123e-4c52-9eb0-fef3e82182b8", "sighting--2a4cc1dd-dd2a-4619-8f49-69a0b3c3e352", "sighting--54d075d6-9134-40cf-be8b-3cf4d4322b66", "sighting--4901f0d4-5641-4b52-92ed-59dbc4e56680", "sighting--f62ac446-2328-4f57-bd78-c1f1a054ea3d", "sighting--1e7fb83b-ec5d-4f4d-be4d-d6508d917788", "sighting--111e6edd-4a0a-413a-9eb4-9a174ac2806c", "sighting--8710fa18-ba3f-47dd-8471-a810e172c1d0", "sighting--12183d7a-e88b-4cfe-998b-20ab0336a37e", "sighting--a39f05b7-2845-41c3-b28e-8460a0a285d4", "sighting--86df19ee-f0a2-4a7c-a515-610cc5299c5f", "sighting--88dc8f38-8bb1-42fa-aad3-9a3849b3cf84", "sighting--a2d2f1d2-cf58-40fb-a0a1-925272c17938", "sighting--71ba9c8c-8c1c-4e30-97a7-6af227bfe684", "sighting--531f35d9-228a-4d05-b2c1-1038b55ed71c", "sighting--467d89cf-2433-4456-a4d1-f04a25f28dfe", "sighting--d02b6408-d3cd-431c-9e6d-6a6d2a99f232", "sighting--4d9d984f-103d-424f-9dab-851913806608", "sighting--92c67480-d713-4efc-b7dc-e636f7a9cb6e", "sighting--fbc01d12-7305-4bf9-8a23-94dac19380a9", "sighting--5e4546a4-458e-4bbc-ac88-40495790f204", "sighting--fda0ceb6-07ce-4b09-ab3d-619e2d3915f8", "sighting--4169742f-755c-4ed2-83de-ba52badddeba", "sighting--99aeae13-2e13-43fa-a328-2865691427b9", "sighting--adac2a44-2568-4fd4-a910-02a7975e6682", "sighting--6efb6b28-b372-4bcc-88b6-974686ef6d05", "sighting--86940f8d-53d4-46d7-bcc9-9aec0ae565e4", "sighting--b4888c34-6828-43eb-a3c1-160b731c74e6", "sighting--da8c219b-22b0-4f10-befa-b379c85371a0", "sighting--38c737c3-7d8c-4bfa-92ae-bb47d6d3adce", "sighting--78fb2e99-5db1-4b42-b4f1-df2e617ec784", "sighting--9dba3ced-2f81-4c84-86cd-228c60446cbe", "sighting--99f37f4d-522f-4ba5-ae03-47152047e4c5", "sighting--ce27d115-7a6e-4d1b-8a95-b61a204d7971", "sighting--045b9ba2-a18c-4757-84b8-d0a8bcec7215", "sighting--e714e839-2ebd-4d33-b82f-7d815e52ab0c", "sighting--591eeb49-93e9-4852-8de9-aff0be67e6b0", "sighting--8d10fc61-4d8d-403d-a4d0-b4bd622625e4", "sighting--64354303-f424-47ce-9af6-f1c174b03ac1", "sighting--a452a043-43ed-4b87-af44-1450acdfeeb5", "sighting--a592b793-0a70-4a0c-8281-0f99b174ceb9", "sighting--7f7e33f3-209f-4714-bab4-7f362ce139a0", "sighting--da6d4f94-6817-488e-9343-8f417d42ff43", "sighting--91512076-6120-4a82-9d0e-f60be816f3c1", "sighting--25c78527-9547-4371-9623-6efbb27d8abb", "sighting--271b48a6-2c7f-4cba-b5b1-64d82f6e6f66", "sighting--e47f6403-c89e-4573-88b7-d5f6ed0aa6a2", "sighting--fb051e44-31be-475c-9301-fbf0608a27e7", "sighting--20e97529-8499-4ed2-98fa-738c783cc37d", "sighting--6ec0b7f2-883d-4d07-af1f-f6d220c911ff", "sighting--1af5e234-d02e-4346-838a-8bb6f83590b3", "sighting--29bce4b2-2562-4397-b756-c58f0ab87130", "sighting--9ccf062d-e19d-4cb1-83f6-9f6a80bd1915", "sighting--e9286df0-5363-48fb-9200-cc15e108db79", "sighting--e870ce22-b2e4-45b1-8f9e-8dac0b386586", "sighting--e0542989-ac12-4ca2-9e25-2706a3196470", "sighting--4d9da2ec-59f6-4e94-9a96-b9e8ee2d9e14", "sighting--a161c7e7-e69e-43bf-bbbd-0615df8b38b4", "sighting--9c173a6e-0876-44f9-ad6a-547bdaf970ea", "sighting--51b18b78-4d0f-42f1-b531-25c952bc1657", "sighting--a81ec70d-c502-46f4-8d16-d51e9cafcd88", "sighting--b1d2d432-5d62-457c-836e-36754d104d78", "sighting--57d498ae-2059-4206-a597-e77a933ded76", "sighting--3d3f8d67-b148-4a44-9329-d9032e5943de", "sighting--d6df06ce-8558-400d-b91f-6ee172d56287", "sighting--deb4410a-d3d8-4a81-9d5e-2ad30a26c71c", "sighting--a126500a-00d3-43b5-ac4d-81077a3d1014", "sighting--487eaba7-87fb-4efa-97fb-6b95bd098e28", "sighting--9abc2742-7c96-4caa-9644-5255df4608c0", "sighting--b4f6c30a-fcde-42a9-9154-8478f58d9552", "sighting--c1e44f66-d6f1-43db-839e-70916b9099be", "sighting--8ce03231-0f2f-41f9-8f15-0f8549bb40af", "sighting--86bd9a26-5104-4215-b930-3057e61bb728", "sighting--25f40b87-cbdf-4f78-a8e6-497816a09ac9", "sighting--c55eb330-eec5-47cf-ab7d-95450c7bcf6f", "sighting--0b016543-818f-4c34-80f6-fd8f2ac40f29", "sighting--d73feed7-ce95-4d19-a4bb-2a90cc70033a", "sighting--dfec3ed9-861c-4461-abfa-040e0122d2d5", "sighting--8df8f1b0-4a53-4afe-89b3-1e79fcdf4bf9", "sighting--b9e55c52-be35-4ab2-a44f-9bd168d8a5a8", "sighting--6219135b-a44e-4891-9e1d-ebcb02651973", "sighting--3ff9b8c7-2803-4a82-8b05-d62c4638d5c6", "sighting--72a363f8-00a6-4d54-9404-8f2439d9a950", "sighting--90120975-96cf-4b10-bd6a-d3979ad5baaa", "sighting--a7ca86be-a9da-466f-ab74-be5cbb7be981", "sighting--5794d878-4a67-4ff6-b753-6e5726517599", "sighting--5a73bdbd-4677-44e6-adf3-97ff48fc0e3f", "sighting--96c37fff-93fd-48e6-b5f9-386cdc593241", "sighting--75b767a2-598f-4062-b81f-fb30067e88d4", "sighting--7a95b079-0e00-4ac4-ad18-d30b292efa87", "sighting--7c2b57ad-6280-42a5-93c7-19fbde5fd48f", "sighting--c5ba74a6-7aa6-4906-90b7-5f8af549c6bf", "sighting--d65a3683-9051-4066-900d-8e7b40f892ab", "sighting--40032a4b-6581-4649-b94e-e97d85609d1a", "sighting--c7db7cb3-678c-4d4f-a43d-5c3de43e1389", "sighting--402d9235-5871-41b5-9004-a08842d95cd1", "sighting--350549db-59be-4eea-842b-401a5d410f9b", "sighting--ed82cfce-46f0-44c5-adf8-d55dd1c5d00b", "sighting--d931894d-395e-4f2a-9f27-80f7e2d0bdcf", "sighting--e1caa295-c449-4c02-8c9b-2df9281ad700", "sighting--f41db9cf-f9cc-4686-8d91-e6866a50cbbb", "sighting--e7264ff8-147c-42e5-9959-bdf457800e08", "sighting--04dfc00c-c47c-4618-ae9f-dc9c89c3bd49", "sighting--d67a7057-1a94-49cb-9407-58f7797ba6fd", "sighting--57cc8a15-1946-4061-9038-71dd5efaa11d", "sighting--6e741d6b-ae0c-4b5a-b87b-f139e1bf9338", "sighting--961c832b-2d65-4a23-a2c6-ace313086ad5", "sighting--349dd06e-96d0-4bcb-aa75-00c26d7e0667", "sighting--b733d21a-d413-4691-9c16-3048291c8f3d", "sighting--0746d2de-c5fb-4541-a7e1-0b766e38142f", "sighting--cba879ac-f971-4bff-a6fc-12afcb6be579", "sighting--d1b1b8db-22c4-4fd1-98fe-bf97301a0ab5", "sighting--a543c57e-28d3-4624-bf4f-aa45f626ee5a", "sighting--e426681e-1368-4260-82ab-a10cc45090b8", "sighting--01b59964-65be-4baf-949e-18f73061e477", "sighting--2aa0a983-33db-4626-af3f-6308fe016dc4", "sighting--b9972691-213a-4694-8231-2a6df966e94f", "sighting--f5e7ea5d-885a-485d-8cbe-f6fde8e79e16", "sighting--050aa276-e54e-4b3c-a027-2b71a17541d2", "sighting--79f4e068-8f8e-4e8c-a18d-353710acee35", "sighting--224b612c-b5b3-4322-9f71-f8c44c3a3b4e", "sighting--e934a0ad-b201-448f-af62-c3c10fe8578f", "sighting--27b422d4-187c-47af-a088-b5f5215a378a", "sighting--d0486f24-6b31-4058-b814-eafee7909853", "sighting--a03e2f03-e0ce-49cf-83e2-4af6dd26c45b", "sighting--ece6f6b9-964c-48c8-b3b2-5cabc9842602", "sighting--c4db0772-8c75-4043-bf44-e467de27b247", "sighting--50e93420-18b9-47df-becb-1aae71e5e640", "sighting--2529b2cd-4194-4beb-8603-46f751c33b8c", "sighting--2db4ff6b-5123-44b4-8712-5f1f21b96629", "sighting--87d125a2-a9b3-4e27-a623-db89e0062ce4", "sighting--b4bb877b-2ff6-4b2e-9dcb-f13adc976aea", "sighting--35186d5f-5ef6-4961-9a77-742ce5faab72", "sighting--045bd134-2614-4ee5-82aa-4e5e62464a0d", "sighting--57fff268-0c6c-44bc-9a61-1d9f6dedc2ea", "sighting--7e3f264b-518e-45ca-a113-d839557bca0d", "sighting--d3efd83e-99ce-42d1-beff-08022497194d", "sighting--21b83187-cfff-4279-8b3b-925b677baf28", "sighting--30322d7a-ca50-4d4f-bbf9-faf5d5c7969e", "sighting--57a403f3-63b5-419c-8044-e2dacc875dbe", "sighting--0fa8bd78-1304-45fe-a3aa-813457e922ed", "sighting--3caa5d28-abf4-4bf9-acce-4d9ee338b272", "sighting--ae761ff8-832f-4163-98ca-54a7cd6e15ac", "sighting--a0563226-87fc-4e90-b41d-c65f37c54352", "sighting--d5189981-9c7c-42c1-a715-f72d3841b6b1", "sighting--fecf6a30-fdb3-40a0-bd69-b77c4357449a", "sighting--29c1ee64-fe4b-4eb5-b971-94ca15cfc072", "sighting--15894eb8-404a-4519-b922-fb9452b3cbd3", "sighting--519bd364-5b35-420d-acce-35e82619338d", "sighting--70519dab-05a8-4b29-8973-8bc4b1d35dd4", "sighting--07f3e735-9027-4800-8e84-dca797bc4b50", "sighting--f3222f2d-d5b5-4d72-a8e8-5763a23dd54f", "sighting--3a7cfa2c-4fea-47e2-b21f-e92d75ee84b2", "sighting--dadbc01a-1b35-4267-bbe9-349368bf55ac", "sighting--65c1ce50-9f12-438e-bc55-0404d802177e", "sighting--94900a75-4253-40c3-b994-bf4964748242", "sighting--ad6d61e0-2876-4afe-bd9b-0eba5c7fac67", "sighting--58f33b4c-d66f-4b9e-9741-f855b7825660", "sighting--9fa4f179-e5cf-4195-a545-03f3562943a5", "sighting--a820e6d6-513b-4e8b-83e8-a5bc2316f8e2", "sighting--4937bca7-bc42-449d-8eea-592455c3b4de", "sighting--b9ff841b-706d-42b3-8bf3-27bf931977a7", "sighting--dc3f71e1-d75b-49d7-beef-21dfbd6fd951", "sighting--97de8aa9-0031-42c1-9ac2-8df315a00379", "sighting--75c0b5c2-3ccf-4fed-9ad7-1863598f7775", "sighting--985361f9-162e-4210-bdfd-886dec719ab8", "sighting--bb079397-2d4b-4908-8a60-2b25335da69a", "sighting--c82c1284-3a3f-40f9-a910-2e0d5e42541c", "sighting--ebd6b4e1-dec6-4913-9bcc-b4b0b1d875ee", "sighting--76f50d99-730b-4580-ab38-65c87a434601", "sighting--920fb167-1952-4b66-8003-8e8776e4cde9", "sighting--6b774ace-5504-45fa-b24a-1898a53e87b8", "sighting--8dfc85ee-ed23-4f85-97d7-68dd252d2a54", "sighting--d3d4ecd3-6677-4b76-becc-aa444d1085be", "sighting--cb3d91ca-5f9f-4483-a57f-82bfcab807a5", "sighting--f4270ca4-6d45-435b-b8f5-a55cc5157ee8", "sighting--cf12322e-d1f6-4396-bda8-3dbfe724a4b7", "sighting--ab6d15d8-7f44-4541-b916-c4e0babf3fa7", "sighting--5d07495c-9aea-4c16-845e-74cc12edee9d", "sighting--3e7aaaf9-6f66-4c3c-87d6-374cd7187b44", "sighting--a83b5102-ba9b-4f0c-9dfd-7b9783f2d195", "sighting--c0ca9435-c6d1-42fe-afd7-15d0a8020066", "sighting--46e609f5-e650-4066-a024-360a79b6bb67", "sighting--a77c9bc2-68a2-42ad-9976-c9352a8b831a", "sighting--586fe66c-6787-4d6d-b2cb-5ac20de852d1", "sighting--def938d7-cbf4-4bac-ba28-d4421ab3ea8e", "sighting--7a12f810-c632-415b-80ac-1981fe912801", "sighting--9455c328-7d82-433c-85f6-14477df86467", "sighting--275112cc-6abe-44ff-b212-60261d1723d8", "sighting--612c0750-f9da-4dcc-8ed9-70133ab744f8", "sighting--1237822a-d317-4010-8051-185de393a747", "sighting--3fe3371e-6e0b-43f9-81c1-613b5a73b8ae", "sighting--d8f83d04-a6cc-4059-a321-ccb4f6abbc4f", "sighting--0e4806f5-f863-413b-b0fc-769d0b05835c", "sighting--a42a9ce0-deab-43dd-8040-663aa9a8842b", "sighting--f3f356d6-0795-46f3-b329-9f19e92bb60a", "sighting--3d6c17a8-290f-406a-b28c-f320e52a911b", "sighting--827b2aef-8e51-47ae-b08b-04b58d808743", "sighting--b7cedeb5-7528-4f9d-be8c-0812cc818325", "sighting--6b29ace1-5601-4be9-9d86-56f6ee0a5b6a", "sighting--46fe8bac-4d3b-4900-b65a-9fbd0abcb72f", "sighting--d91a9b18-c016-4d28-97a3-b986820bffc4", "sighting--afdbc438-9e77-4596-ba90-38e78a703016", "sighting--e3de32cf-0e61-46e0-a47b-0cdaa6cb9229", "sighting--82c58193-63d0-4def-8399-b08f2207e642", "sighting--6b146e46-8a86-495b-9a9f-8f22a6bd35e3", "sighting--3ba2577b-5507-4e0f-a6d0-ef350d670ae8", "sighting--4d69ea9e-2436-4186-b353-eeb15c8fd480", "sighting--917cb22e-ec3f-4461-802e-8bc69be98869", "sighting--df1de5de-d4e3-481e-951d-723dcf2cc89c", "sighting--4dd0b4e9-ef87-4132-af88-8d8b69109537", "sighting--6b9da2d5-7053-49f7-a619-0809f75e40a0", "sighting--74b41643-bd3a-4c04-a2b9-9c0a7e218b73", "sighting--0d8f9864-8b0e-447c-9cfc-89f7164f6f6a", "sighting--68d9ca4d-6db0-4b3b-a98e-c3e23907bbbf", "sighting--3b14dd1c-3f4b-438b-8942-441051c492be", "sighting--ae862252-b01d-457e-afe7-12afccbd4e10", "sighting--6d9d9711-70a7-4e99-88ab-5f00f5fccac2", "sighting--95cddcb3-5cee-48b0-964f-e88ad05ffc3d", "sighting--51cdf06c-8a37-43c2-8c43-b41c2e5ae456", "sighting--1cdb57a7-eeab-4b9a-a816-7bfe527cb99d", "sighting--9179f26c-1194-4763-a329-9de7af1708bd", "sighting--0e044781-414e-43af-9dbb-64ccbf1e1b85", "sighting--fcee049a-9358-4aaa-87b8-439a1db14361", "sighting--edcece8b-effe-4777-af4f-40f19d562b47", "sighting--6ffef81c-6bec-433f-9766-65275ef2e354", "sighting--305af127-7f76-4f0a-a38a-184555472177", "sighting--76b46e07-31b4-4738-b800-e7f01f4e3d01", "sighting--07bc3ce2-de48-49b0-bfb6-63e1f1a48bdf", "sighting--35488260-6d30-44e1-95bf-707554385cdc", "sighting--84a5bfde-8907-4be6-824c-5c9dee1749bf", "sighting--f578e895-e241-4295-9df2-dc8e05707f1d", "sighting--3e41797f-e85c-47bc-842e-2ef54261b62b", "sighting--b46b3ac6-4300-45f2-82fd-03baf6e9aaeb", "sighting--a04e7636-6b9d-454f-a1d5-2bb49086f862", "sighting--37309370-8dad-4c33-9fd6-940ec6a01055", "sighting--08508a0a-0fdf-4257-b50c-a02c31c437fa", "sighting--b0815615-e729-4644-8411-9d30b80b2a60", "sighting--da829273-fe86-4923-99d5-c1c23992af02", "sighting--4abc0efe-ca27-49a8-bd49-6f2a37eecea9", "sighting--349ef6da-1030-42a4-bf4a-2e81e2f1fe4f", "sighting--20cb1837-c5e3-487d-b840-75ecc61ab772", "sighting--d1015159-9247-4c3d-9261-0f7202eb57eb", "sighting--75b313fb-aba0-4b21-af03-7e2f05427256", "sighting--2875c295-a92c-4fd7-b717-909003c9b49e", "sighting--d1d8b88f-6571-49d5-a1f7-278136f1604f", "sighting--52742206-8aaf-4ea8-b0f5-08dbb1960dd3", "sighting--6bbc9ffa-3fac-45e6-bc4b-33a461ce75d7", "sighting--0c831f2c-da34-4eeb-8420-4949e1d8d615", "sighting--44519f44-a29f-4542-b758-07eb4fb17cb2", "sighting--9108aa82-5b8a-4eee-8ec2-27e1d7f3512e", "sighting--6dcd146a-9259-45f2-b406-903ad573538c", "sighting--131377d3-d96f-4348-a7f7-d1518fcd7a3a", "sighting--b4de4225-d0f1-4768-89eb-fb59628ac1d4", "sighting--99dcd173-0028-41a6-ab3b-5224e14af00e", "sighting--5ed03272-a5ad-4a7d-9c66-3b3511b70afb", "sighting--bfa302cc-42af-488d-87ca-77aef6d1f296", "sighting--dbbeaa8d-fa1e-4d7e-b981-bfc57a37b501", "sighting--16766379-d102-4975-b711-d794fc640e06", "sighting--4423feb2-a6b6-4edd-bb1b-64be4b1f8f90", "sighting--8ac8a02e-573d-42db-b794-e50cc0f35618", "sighting--b0176a45-dcf0-40ea-a0a5-6d08327da6a5", "sighting--7a14a525-751c-424a-82b9-a1581201a9d9", "sighting--aa368ac8-554d-400d-a38e-b27722d79345", "sighting--969e12f2-2f2c-4dcb-a190-596ad3f58c5b", "sighting--a67f3120-ff0f-480c-9e63-7b9453d070a7", "sighting--4fe6c6cf-f6fb-4914-a5fd-85d565ea6049", "sighting--aed6e6c7-b577-46d7-8a0a-0d3454b89d9f", "sighting--41823dea-1141-4d56-bb86-8603ccbb2fca", "sighting--0ca27aac-ac73-4db5-9579-dbeaed864bb4", "sighting--da24df2e-5e08-44b3-be80-ec56c2ca872e", "sighting--ae8327ab-d80a-46de-b6d0-2083d4e44580", "sighting--11e53890-78fb-4979-9f59-681c97924dcb", "sighting--c6afac62-a87f-430c-b40c-d4c30c123157", "sighting--d31391de-0829-4936-8aaf-6e9d3c816ded", "sighting--82743f6a-24ae-4b92-b80c-2354cfc39765", "sighting--7a887d98-6e84-428b-8208-476de2f26441", "sighting--5227a890-da31-4d68-a41e-cd53cc05ae5c", "sighting--ba69b102-bae4-4075-95eb-42340cb78fee", "sighting--a93341f4-ef89-455d-8562-dc0e9196f45c", "sighting--3eb90d83-f3a7-4998-898a-df17e810963f", "sighting--c7e0eecb-66d0-453e-9780-8bcacd219153", "sighting--dae43aae-5fe0-47ce-a958-db6899bad21c", "sighting--8f53378c-7fa3-412e-b218-0e070c2e2e23", "sighting--8813d2a3-a246-4dc3-a6bb-80557631a688", "sighting--91f12990-6729-452e-a904-770cfd079eaa", "sighting--83ecb535-b0a4-4b2c-a1ba-bfd6d3ad5c11", "sighting--1560e252-2c4c-49ad-baf8-2fffbebc11e4", "sighting--df0f1847-49e8-464f-ade2-dcba82cae56d", "sighting--6e383835-540c-4e19-ae01-83b92250dfb3", "sighting--d005613a-465d-43c4-905c-181157a0ea1a", "sighting--a068dc86-2215-4512-adee-4bfbab724b5f", "sighting--d0b4fad4-ee31-4a2e-9924-931655dfaa07", "sighting--58fbd1a6-d86f-492d-a970-61f6a30e8f7c", "sighting--6f8c8e66-e72e-49b8-9cfe-7c2fa34ae913", "sighting--c6362bdd-5cd0-4431-8289-885955759d89", "sighting--66c3949f-9c83-424e-9f45-4f321edaa6cd", "sighting--5e9c5512-39c0-44d8-9552-41ee0668a3cf", "sighting--a77ee107-5c69-41ad-890a-1832d03ec132", "sighting--f5a9d08e-04d8-43fd-b583-f6250922f7c5", "sighting--1ee59262-0bfa-4d4d-a002-6a46d3757df8", "sighting--81b27d0e-5f86-4d74-85f3-932851f14101", "sighting--7561d941-896e-44db-bd0b-39c839a3b1da", "sighting--c09b9f2f-73c1-4971-a60e-c81a3ebfeeed", "sighting--83d33160-91d8-4482-9311-17fe2255439b", "sighting--64f2f4a1-dda1-4b9a-9325-04d22eac6268", "sighting--2a74e83d-c077-43ec-9d27-9632c5879d53", "sighting--353395e7-1cd2-4dbc-b528-b4941e6140cf", "sighting--cc0882d2-8bdb-4d75-8618-b0854b961810", "sighting--3f822730-0e8c-4d2c-9482-0aa32ea0a5f4", "sighting--8f1be21d-2463-4e76-96ff-a692e166da96", "sighting--e9b420a7-1d59-4874-9ddc-f3c23456a87e", "sighting--96767344-5a12-4033-bf33-038d052f551b", "sighting--0d0efe34-b07c-42dc-9f51-717308cfa806", "sighting--437cd2d8-e394-460f-9b24-714969f99d31", "sighting--756edfe6-d091-4753-9732-1224277ada46", "sighting--aeded4ce-d0c4-4db8-9e55-5b0a4a1a5d9e", "sighting--52cbdf98-5675-4dcd-8fbc-3f96fbd520da", "sighting--02a96153-7e8b-4a6b-b61b-9b89945c7b53", "sighting--7f5e0849-1e19-42c4-801b-fcb67f077f77", "sighting--88b27eb6-d81c-43b6-9f96-4703e216260f", "sighting--5917c100-f2fa-405a-91e9-d3d8de40e5ef", "sighting--aa1be4e3-0153-425f-9029-39b9bc25b462", "sighting--8b0ba69f-48a9-4bd3-b0cb-65ab1b955119", "sighting--c311e473-882e-443b-a6d4-1e616b3120a8", "sighting--92e7881d-a9e0-4a0c-9699-b331f8b0cf74", "sighting--3892880c-c048-4015-9085-98e90eb38c0f", "sighting--7e4720b4-1b94-4b8c-ad07-54e8df1f0663", "sighting--a003a535-bf69-4516-8cdd-ea7ddfc02e19", "sighting--6955c3bd-f0e1-4974-a368-d433121c5c2b", "sighting--5f3e0caf-558e-4136-ad3b-b8a77b6189a7", "sighting--eeabd410-4204-4cfa-ba76-6fb11b06c887", "sighting--fc089645-a09e-4633-894d-4355496dab7a", "sighting--d14a100d-bb07-4baf-9c8e-d0c780b95655", "sighting--9fd94965-f1c4-4185-a86d-f0fc8b438b9b", "sighting--7ee40354-7afe-4828-a88a-83ea864d050b", "sighting--1aa4d1c4-880b-4bea-b0b4-0758133f039b", "sighting--2186defc-4589-4d0c-9ecf-84fd18c3ebea", "sighting--2dedb599-e355-4f54-8ae3-0488cee2f82b", "sighting--d4f5476d-7026-4bb5-9d30-19e09741d4e1", "sighting--7bf46d61-7a99-4bfb-8267-fd0c025b3c22", "sighting--7e5a3f5e-13cf-4cfd-8401-b7933c874b8e", "sighting--e4e761cf-0df3-4d4d-ba41-5a3213f91af4", "sighting--09e9c9af-c4ed-456c-967a-4d491e1af58d", "sighting--5ae2aa64-2db4-4dd2-96d8-a77e1600aedd", "sighting--5616a558-2fe9-4a5e-a58a-767a94a9a5ac", "sighting--529c6ed5-7352-452c-8451-0328c46c5239", "sighting--8b0a8580-a728-4ba5-8f5c-58943054ce17", "sighting--7a03ffa8-3892-499f-8321-1e3e28cc23a8", "sighting--7060e250-8dd1-458a-9839-d625084fa1f7", "sighting--86e50b43-8754-4f87-a231-779fba2f65d1", "sighting--d6b3b4e5-ddc2-49ab-8517-ef54b7d8e9bd", "sighting--382fe71a-01eb-4df9-b6dd-57850fe335a7", "sighting--21a65784-33fc-4b1f-90a4-9a67c3a5b9ba", "sighting--d156a03d-9d98-4aed-832f-ab9180d11fc1", "sighting--740bc694-f5d0-4c09-9b70-6e8ee7b51a31", "sighting--e0e48ebc-2d93-4b7b-b85d-c2d41259d4d9", "sighting--b9ddef2f-8506-4d5e-a297-a4c608f00918", "sighting--5d006bac-c785-4354-aac3-e6fe44d7696b", "sighting--cb96d85d-36e6-428d-bdd5-87e8e73c81b8", "sighting--15cf91fa-754e-4280-8b54-6b8cff4cc559", "sighting--0a9a19de-05e4-4ed4-80aa-2ad1a932f121", "sighting--98eb3305-2a43-4282-85a0-756f5619f7cf", "sighting--83d0c1ec-281c-464b-a2b3-493d0e4bc7af", "sighting--dd8490fd-7edf-4497-81c8-29cddebcfdaa", "sighting--e1ba2b71-7891-4178-9a85-6242dce63c0f", "sighting--3cdc74e3-7774-4b01-93b8-755595ca5c78", "sighting--efabbd41-4ef8-43bf-8c16-ac482b8c9bfd", "sighting--ce0771ef-eab7-478a-a381-e142de0aed01", "sighting--dda36283-7784-4cb1-919f-044fb966b2ed", "sighting--435298b6-cb22-4a40-ad8f-6d7dbad9e2ac", "sighting--1e837a27-fa91-4e03-b8e0-4fb0396f3def", "sighting--50fb7982-3acc-4b01-bdaa-67f66197a753", "sighting--17aa2d85-c57e-4da5-b3bf-43e0af96aea2", "sighting--3c7de3e9-491a-4fcd-b186-f9edf8e41d94", "sighting--0e024ef1-2559-4413-b218-b531ed0baadb", "sighting--f33e5cba-0327-4394-9acb-6d5ca9a1e8ea", "sighting--b26a8052-4e7f-49b4-88f5-04fd31e1b740", "sighting--b4c29aad-3b30-4f1d-b839-920a56a9fa28", "sighting--caa710df-c1d0-48f8-b108-e0f8e62cf041", "sighting--8c118fa5-6627-4be1-9c8a-57eccd40e9f1", "sighting--f423ee21-4a7d-4294-bef0-562a43870c2b", "sighting--f1272bd0-c765-444f-a646-8e543128a93d", "sighting--54185cab-1ce7-4822-98a8-fa388f613d47", "sighting--f7f561cd-ed21-4d81-86b4-4da2c6c546f4", "sighting--546b5ee3-a749-4352-876b-0f6479457c21", "sighting--9732e743-5428-45ec-842d-effb631ee4b8", "sighting--fa2052ee-1a75-44c4-9e41-87b114c0bcca", "sighting--e0823f92-cf2a-4537-854a-2608991f14d6", "sighting--c2548a84-eed3-42bf-ac7f-ecb5354af467", "sighting--288f4914-798d-41c0-a584-8b321cd6f598", "sighting--d72aa824-15ca-47e7-a4cd-84627200b9c6", "sighting--3faeb78a-2764-491d-b269-e5002fd5ea49", "sighting--f38289cc-2cb3-4c71-a3b9-c44a6df90fc7", "sighting--b7936a4b-01ca-4dcc-b5c6-7aa65f26a77c", "sighting--89966d8f-cf12-489e-8029-a332c762ceac", "sighting--9922e153-61cb-474e-81e7-9da8986cac05", "sighting--c35b2b3e-c250-4740-9f27-d4c24a6e567b", "sighting--51a66f1f-845b-4b22-ba7a-7d568e5c012b", "sighting--8c3f0a9a-06f9-47db-8ba0-6d2d486430e8", "sighting--f73e4052-3707-4580-9c5c-f6b883f83d48", "sighting--b89113ff-95e8-4db5-843c-cee5c80b995a", "sighting--d53c0819-8417-4efc-b026-4dd356f824cb", "sighting--795d6d55-11e4-4658-a33f-fee97a3c87bb", "sighting--890020b6-321f-49d7-bc9e-da45ac77cc01", "sighting--b6940c55-d0a3-42ad-a3bd-9e276b1d263e", "sighting--29829090-d9f3-40b2-a632-42fb9c9b1df3", "sighting--336a5c7b-f45f-4713-a151-c32898107c47", "sighting--491851be-dc71-43e7-bfb2-805fe883c83f", "sighting--bb3dd980-c75c-46c1-8de7-f0f19d5d1ab4", "sighting--74d8ee56-f616-4b69-af66-568b3bf5b272", "sighting--61267b56-4c6d-47f3-bc2d-b9bf58026ca4", "sighting--079ad0da-3a33-4978-801f-214edfd2e0aa", "sighting--550a13b6-3c79-48e4-866a-0cca2ce4563a", "sighting--0b0649c4-be21-41d9-b80d-d1e39695e995", "sighting--82d4cd5d-b757-46fb-921f-0abf8e75b440", "sighting--098f947d-3929-4593-8882-7d7c0a09ca70", "sighting--256db28f-c9d9-488e-a143-189811456ae0", "sighting--bd98347b-6793-4539-9075-240f14390b38", "sighting--32800bd1-04a2-4c66-b797-810130898a44", "sighting--11739a8c-68c7-4f8a-bfcc-5eeb18b313f3", "sighting--d78866bd-e966-4c9d-8905-b054b7c391e4", "sighting--b28a1d4a-60d0-4356-9cf7-f2e8dd65610b", "sighting--a3236728-a5f6-455c-b30c-8f60db562a14", "sighting--5d40cb17-ee20-4862-ac1b-332897ee5b74", "sighting--43233b3c-d223-4cfa-b57d-8dfee316ae84", "sighting--1f87c641-61ec-4194-8068-16f7b1fe448d", "sighting--74f47f98-42f8-4b01-8dab-b7c5b3598762", "sighting--e1a3e775-b400-43c0-8c56-a28bffdbcda8", "sighting--a142342b-7dd4-481d-aa4c-ce00893ae682", "sighting--7d45045c-93ff-4bd2-8c5c-f7ac5fd75958", "sighting--5edee5b2-b237-4279-9872-0f10ed0b8b23", "sighting--f0764a73-d9fa-4dc7-9fef-d68f9c91b2b4", "sighting--f7216c64-bbbc-4e2f-a836-7bdfc30ec08b", "sighting--4176c538-454c-4f90-9d3d-3b9b2563b511", "sighting--0226bcd1-d3dc-48a0-a151-eb9519121290", "sighting--8a894255-495a-4847-849f-9a04a47fbf94", "sighting--a1294358-2422-473c-bcda-5ebb81b446e7", "sighting--bbec1622-3685-4a92-b3ca-d528ea78fd7a", "sighting--f3d2b909-9b2e-456a-8f23-9cd3f2a7f13b", "sighting--ca6d81bd-d8e4-4729-b4ae-5c42166d645b", "sighting--370b86ca-8aaa-4a6d-acd8-f6e8a0a687b5", "sighting--cf424bf7-ef55-476f-a35f-3fd67558ed5d", "sighting--cb38694f-9cc2-4796-afd8-ef2af1f322d5", "sighting--311cfea8-8eec-442b-b66d-b841d93f24c2", "sighting--e156c082-ac2c-4dc2-aa5f-2664c2fdb8fd", "sighting--bd1d3727-38f3-4011-90dc-88495e1918b2", "sighting--d88a8775-f52e-4ffe-9b5d-876cb86597f1", "sighting--5be135a9-12e9-4e4a-86b6-39d98430747d", "sighting--e7f7f987-521b-4ba9-aa86-32f05b0a0233", "sighting--09f27ff4-9c5f-48af-92a7-64bcf1e356a7", "sighting--a1bbdfe0-6d96-4677-bfac-9d953b1ac1bc", "sighting--2d84d60b-6ce5-4f47-ae00-91b16cc06d7d", "sighting--73a458b5-4dbd-43ae-a416-def6a34dfd50", "sighting--4fd132f2-7a31-4110-947b-88f72c0e23ab", "sighting--1b43298c-f5af-4c8e-8666-913d1c1f7507", "sighting--3112582e-409a-415e-8e86-573e8acfd4ed", "sighting--d05ebacd-141f-4b6c-97f5-83b299cf76c0", "sighting--71fbe9d0-d0cf-4984-afbc-13fd180456f3", "sighting--791afe77-44ee-4d50-96c1-01132741c74c", "sighting--0dbc4d00-62f7-41ca-a216-45e5d03e6ac7", "sighting--376d7e39-abed-4407-b6d6-6fc66cd23f21", "sighting--9eccf7e8-a376-4b6e-b892-6f11fd20a4f6", "sighting--6d6255ab-527f-4223-a76f-779baae566a6", "sighting--8ebd4532-a957-4fca-a0de-47058e0df600", "sighting--9700251f-0789-4c46-9581-15edd8a64f06", "sighting--dd8e3c3e-8d0f-4d48-84f2-485300525982", "sighting--d46487bc-bcc5-4015-b1e8-846f740175e9", "sighting--14e8eccb-7ea8-48b3-bafd-d9add1886bfb", "sighting--c57af648-1b09-42fd-be2b-049b3941e7d8", "sighting--e8275f66-b868-48b0-8fba-f382e9e195e7", "sighting--ae340a90-7d9b-412c-8ad2-3e0bb3d37329", "sighting--02709212-dbf7-4b59-ac10-496cc0e98efa", "sighting--808c9146-a034-4d35-8be0-7b95dbc51f04", "sighting--3f7cd5a8-5a9a-4c5e-affa-90deefb9a37e", "sighting--04344e9b-c33e-42ce-9725-0f478d01229d", "sighting--56524371-7f3d-468f-9d6d-a89caecd0d50", "sighting--b43912a4-54dc-4a44-a0a2-27bb97fdf4e0", "sighting--8f2b931a-5cb5-4757-a192-715d14989c55", "sighting--fe87da63-8f7e-4da2-9c72-c714c7d873ad", "sighting--928ac332-3b05-4ab0-8b77-f623c8c8bcb9", "sighting--a97b164c-ac46-4f98-bdf9-11f64ed8c98f", "sighting--d6b54886-b2f5-4f8c-9571-cc2092e47f3a", "sighting--9d1888fd-77e9-4033-8da8-85df7588c367", "sighting--c795722b-f4af-4ff6-a48d-0df508cb0bfb", "sighting--3a24ca57-ac76-4b60-941c-e6aa38c3374a", "sighting--b1849f15-bcd6-4ac4-ba78-6ee01bed1d98", "sighting--d08d5c45-d760-4f07-8471-f44292f6acb7", "sighting--7904f2ca-a39d-4649-9330-1ed3109e83e1", "sighting--b127a348-d504-4313-99a7-77ac74c51889", "sighting--1efdcc7f-4bf4-4c3d-8187-c2dab193e618", "sighting--326afd18-d3b0-4d52-981a-4b45c1d50d3f", "sighting--30e86be6-e394-4ed7-89fb-ea3fff682ae8", "sighting--9eda7357-8490-4bbc-afa1-842b0388491d", "sighting--b32b7c28-90ac-4af9-99bf-c3478edf07e2", "sighting--830d5112-c484-4647-9fea-81877a4c60d9", "sighting--b7e3e17e-6d74-4c04-8642-5f1be2ea1b3b", "sighting--866b7d6d-2203-40f7-9f3b-b6f760b70e77", "sighting--9d5e7373-8102-4168-8b6f-9d5e5e82aa46", "sighting--7f13261f-0b5d-48b2-9518-18a556ba4e84", "sighting--ed11422d-52df-4572-a4a5-3866b3cc6fc5", "sighting--f77ed953-ba2c-456d-b73b-6860eeeee3bc", "sighting--e162f6aa-fee7-40f7-b556-0f8d899080f9", "sighting--a1d9736b-cbf6-4be2-b652-3ef700a022d9", "sighting--340993bb-b6f5-4291-9de6-8e559b3cb8d5", "sighting--76e8f630-257d-475e-9745-41a284aa16e3", "sighting--665db967-3ed5-4088-94c1-fcd6543c50ab", "sighting--403fc496-afe7-4e6b-9e09-b826c0df9cbc", "sighting--09035717-172b-459d-be74-38f982688f31", "sighting--206843dd-666a-4fb5-8081-ec540c5329b8", "sighting--b9411d34-cc1c-4933-87af-a98f86d58906", "sighting--109a1a05-4778-41b1-a3f9-91e078840997", "sighting--6baf0d47-ba88-4473-a6f1-340a35baa680", "sighting--6986421c-7937-4508-96f1-fcb259343d22", "sighting--647669ca-b5ee-4aee-af66-bebe8ea837d2", "sighting--67d48a1f-a3cc-4860-9bf7-c924cd7c1734", "sighting--9707d1b2-8823-4105-87e6-7343c4af6f25", "sighting--7568e855-f89b-4f66-a8b3-73d290679f91", "sighting--2ce39ab7-0d53-445f-981e-d6b47b28a045", "sighting--46a964f0-b809-46b0-bd5f-471c69beff84", "sighting--16aca7ce-db0e-4217-ba58-241d1cd77db4", "sighting--905efd74-cc95-422d-aa45-6f646bf48763", "sighting--18d694ad-6997-4f39-a6df-c421ca190e6e", "sighting--825d7412-42ad-431d-89f7-0bfb09fdad61", "sighting--92948059-3b4d-46fb-b586-58a4bc5ddd4f", "sighting--545983fd-c6a3-4bc8-9fb2-84f346b6e849", "sighting--deb8a37d-4cf1-4cbb-9ff2-73cdf6eafbd6", "sighting--6c01de5c-669e-48bb-b9b2-74e01c6a993f", "sighting--81534db4-e37c-4028-8b1b-cb8091b84dc3", "sighting--f941e3f7-0580-49fe-8e3f-600558c6a2b4", "sighting--9199b2ab-85f0-41b9-b646-870ec929f834", "sighting--89ee5ca5-60d3-481b-b4e8-a8aac5b16f5e", "sighting--6821730b-54ca-41f0-8638-d4b378a34e1d", "sighting--91408d2a-7f7f-4137-b6c4-a2d1f04f611d", "sighting--1928b182-83be-4ac4-b760-d90491d28a06", "sighting--089bc733-22dd-412f-9dc4-a663eb923113", "sighting--af63f353-7703-46f7-a717-0426d11adf14", "sighting--7c9040dc-b989-40a5-bc42-793f6779b82b", "sighting--ab7bc278-6054-492b-aeae-b26f30716557", "sighting--7425028c-ee04-4140-910d-d0c772ceff81", "sighting--c4b796a4-be5e-4e4c-9c99-4c3d39c238dd", "sighting--16c07b4f-4400-470a-b95f-33e9931659d6", "sighting--60f5c02b-ba74-48e8-96d5-1417b8e8b835", "sighting--966c6aa4-5f4a-4cf5-9f02-3dab9ae0ce85", "sighting--1bea6632-caf2-4872-b641-72ee598c9561", "sighting--6725fe37-0486-464b-8381-a94df6b5b935", "sighting--b56ccb1d-45c6-4e3d-bae4-a9634401f41d", "sighting--68c0f804-feac-4838-87eb-c423850fe4b0", "sighting--77106de8-59b0-46b4-9276-e523f9ceb7a8", "sighting--94983501-9fe0-4983-94f6-fe1e5342266d", "sighting--3228a130-89f6-4340-8697-554d3171818d", "sighting--776ff723-d17e-477f-b736-21fd503843a2", "sighting--ed4c44d4-567c-4e47-bfde-ac5684cb010e", "sighting--9863380e-240b-4a97-bbcc-2581f65d07fb", "sighting--c9207972-8abf-4ac7-8cb5-f7810c899ea3", "sighting--d6eef824-18c6-4069-a3c7-4703c00708f4", "sighting--3b4b7327-d412-4550-be80-8d35d71e96df", "sighting--17146642-82bc-48d5-913a-f62f86f547a2", "sighting--c07af406-cedd-4822-8d36-36a14be5e9b8", "sighting--2f06f910-c468-4b79-9dba-94ef71dc1ab0", "sighting--cafc60e2-f893-4854-a45f-cdb7de8bb07f", "sighting--7de1f9dd-77e6-4912-8e36-8ded1faf9f94", "sighting--b302e5c6-a41f-4b94-b687-1700edc15805", "sighting--a5cc4fd5-9ef8-492b-a9a9-eedecac327a9", "sighting--e487e7d0-ea16-4c25-a793-5c9fbfc65c4d", "sighting--e8c0bf7f-e0a7-445b-bbd1-8ae70d6fd512", "sighting--5278cc26-3a18-49e9-bd21-a790d3c656c3", "sighting--1c5cab0d-69a1-4979-a2ad-c0c8a00ef1a9", "sighting--4bbfa151-4e2a-4889-918b-f8183dbe2cf3", "sighting--24272b2b-2cce-4c49-b377-07d91f25f074", "sighting--e6032e00-294f-47bf-b794-665ae603eb80", "sighting--a449208d-f10c-4078-a798-355e3c9eaba8", "sighting--0326eebb-f249-401a-8e78-e11ee1aebec6", "sighting--ac61a59f-7b9a-4909-9001-6871051bfc0c", "sighting--b8b89d59-f669-4b3d-900e-09ef855fd599", "sighting--5aea7332-5260-4084-a31d-398ce5e0e04f", "sighting--067332a4-cf4f-4b9d-9b5e-0a5e450cfbd9", "sighting--3ce0b991-bc74-4796-8e59-b367cce4a76d", "sighting--8caec9cb-8707-4c26-9425-a6f5ed5ab140", "sighting--4abacfaa-ec62-4694-a78d-96ac5cac2b89", "sighting--1448ff56-1e5b-44bb-83ce-c0c6d245a3e7", "sighting--bcb3e14e-25f7-4e2a-b0ad-b142b22c90a1", "sighting--458063be-84bb-427a-9997-f0bc0ba33e56", "sighting--f2a1f6d0-667e-4a65-887e-b4cc2bc8a76e", "sighting--9a8608dd-c680-41cc-a86d-8aa3f397bd5c", "sighting--ca5e0e05-d64e-4778-8e56-3b0b47d4dc4b", "sighting--21d3b067-38ef-4f5e-9e54-c83ec253ad29", "sighting--d487445e-538d-4d57-bc42-6f820bc365c2", "sighting--8738a16f-8a79-4a75-9fba-a55c66500545", "sighting--1e89b9c6-965a-40ee-b24a-a28941106d12"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-03T11:00:01.817Z", "modified": "2026-07-03T11:00:01.817Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}